Unscored severity · published Jun 18, 2009
CVE-2009-2113
Multiple SQL injection vulnerabilities in FretsWeb 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) name parameter to player.php and the (2) hash parameter…
–
CVSS
2.6%
EPSS
No
On KEV
Description
Multiple SQL injection vulnerabilities in FretsWeb 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) name parameter to player.php and the (2) hash parameter to song.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FR
Fretsweb · Fretsweb Project
1.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-2113
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-2113
Broken Link
http://osvdb.org/55167
Broken Link
http://osvdb.org/55168
Vendor Advisory
http://secunia.com/advisories/35492
Patch
http://sourceforge.net/forum/forum.php?forum_id=966939
Third Party Advisory
https://www.exploit-db.com/exploits/8980
More from Fretsweb
–
CVE-2009-2109
Multiple directory traversal vulnerabilities in FretsWeb 1.2 allow remote attackers to read arbitrary files via directory traversal sequences in the (1) language parameter to…