VulnerabilityModified

CVE-2009-0593

SQL injection vulnerability in members.php in plx Auto Reminder 3.7 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a newar action.

MEDIUM 6.5EPSS 0.86%

Does this matter?

Lower severity and a low EPSS score (0.86%). Track it; it rarely justifies an emergency change on its own.

Description

SQL injection vulnerability in members.php in plx Auto Reminder 3.7 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a newar action.

CVSS 2.0: 6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS: 0.86% probability · 56th percentile
CISA KEV: Not listed
Weakness: CWE-89
Affected: plxwebdev/plx auto reminder
Source: cve@mitre.org

References

http://secunia.com/advisories/33283Vendor Advisory
http://www.securityfocus.com/bid/33106Exploit
https://www.exploit-db.com/exploits/7663
http://secunia.com/advisories/33283Vendor Advisory
http://www.securityfocus.com/bid/33106Exploit
https://www.exploit-db.com/exploits/7663

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.