CVE-2009-1433 (silverstripe) [Sitemap] - HeapOverflow Computer Security Community & Forums : Heap Overflow.com
PDA

View Full Version : CVE-2009-1433 (silverstripe)

Heap
28-04-09, 03:06
SQL injection vulnerability in File::find (filesystem/File.php) in SilverStripe before 2.3.1 allows remote attackers to execute arbitrary SQL commands via the filename parameter.

More... (http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-1433)