CVE-2009-2439

{"id": "CVE-2009-2439", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "[email protected]", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-07-13T14:30:00.297", "references": [{"url": "http://packetstormsecurity.org/0907-exploits/alibabaclone-sql.txt", "tags": ["Exploit"], "source": "[email protected]"}, {"url": "http://secunia.com/advisories/35741", "tags": ["Vendor Advisory"], "source": "[email protected]"}, {"url": "http://www.vupen.com/english/advisories/2009/1838", "tags": ["Vendor Advisory"], "source": "[email protected]"}, {"url": "http://packetstormsecurity.org/0907-exploits/alibabaclone-sql.txt", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/35741", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2009/1838", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "Multiple SQL injection vulnerabilities in Web Development House Alibaba Clone allow remote attackers to execute arbitrary SQL commands via the (1) IndustryID parameter to category.php and the (2) SellerID parameter to supplier/view_contact_details.php. NOTE: this is a product that was developed by a third party; it is not associated with alibaba.com or the Alibaba Group."}, {"lang": "es", "value": "Varias vulnerabilidades de inyecci\u00f3n SQL en Web Development House Alibaba Clone, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del (1) par\u00e1metro IndustryID en category.php y el (2) par\u00e1metro SellerID en supplier/view_contact_details.php. NOTA: este es un producto que fue desarrollado por un tercero; no est\u00e1 asociado con alibaba.com o el Grupo Alibaba."}], "lastModified": "2025-04-09T00:30:58.490", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:web_development_house:alibaba_clone:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "40C8CCA5-B271-43B5-AA90-CD5D59DB527C"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}