Vulnerability Details CVE-2009-2034
SQL injection vulnerability in writemessage.php in Yogurt 0.3, when register_globals is enabled, allows remote authenticated users to execute arbitrary SQL commands via the original parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 50.5%
CVSS Severity
CVSS v2 Score 6.0
References
Products affected by CVE-2009-2034
-
cpe:2.3:a:ricardo_alexandre_de_oliveira_staudt:yogurt:0.3