CVE-2009-2605

Publication date

2009-07-27 14:22:00

Family

mitre

State

PUBLISHED

Description

Multiple SQL injection vulnerabilities in adminquery.php in Traidnt Up 2.0 allow remote attackers to execute arbitrary SQL commands via (1) trupuser and (2) truppassword cookies to uploadcp/index.php.