Security Advisory

CVE-2009-1613

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2009-05-11 20:00:00
Last updated 2024-08-07 05:20:34
Assigner mitre
State PUBLISHED

Description

Multiple SQL injection vulnerabilities in leap.php in Leap CMS 0.1.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) searchterm or (2) email parameter.