Home > Vulnerability Database > CVE-2009-2345

Mend Vulnerability Database

CVE-2009-2345

Good to know:

Date: July 7, 2009

Multiple SQL injection vulnerabilities in ClanSphere before 2009.0.1 allow remote attackers to execute arbitrary SQL commands via unknown parameters to the gbook module and unspecified other components.

Language: PHP

Severity Score

7.5

Related Resources (4)

Url: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2345

Url: https://nvd.nist.gov/vuln/detail/CVE-2009-2345

Url: https://github.com/ClanSphere/ClanSphere/commit/6b9550076acb9c6851af6b323bf7c144c25a0a5f

Url: https://www.mend.io/vulnerability-database/CVE-2009-2345

Severity Score

7.5

Weakness Type (CWE)

SQL Injection

CWE-89

Top Fix

Upgrade Version

Upgrade to version 2011.4.3

Learn More

CVSS v2

Base Score:	7.5
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Mend Vulnerability Database

We found results for “”

CVE-2009-2345

Good to know:

Date: July 7, 2009

Language: PHP

Severity Score

Related Resources (4)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v2

Do you need more information?