SQL Injection in Mr Saphp Arabic Mobile Messages Library
CVE-2009-2394
SQL injection vulnerability in cat.php in SMSPages 1.0 in Mr.Saphp Arabic Script Mobile (aka Messages Library) 2.0 allows remote attackers to execute arbitrary SQL commands via the CatID parameter.
Vulnerability class: SQL Injection
EPSS: 0.009 (56.7th percentile) — read the EPSS interpretation.
Affected products
- Mr_saphp_arabic_mobile Messages_library — versions 2.0
- Smspages — versions 1.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)