CVE-2009-0428

SQL injection vulnerability in CategoryManager/upload_image_category.asp in DMXReady Secure Document Library 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter.

• CWE-89

• http://dmxready.helpserve.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=93
• http://dmxready.helpserve.com/index.php?_m=news&_a=viewnews&newsid=12Vendor Advisory
• http://secunia.com/advisories/33482Vendor Advisory
• http://www.securityfocus.com/bid/33253Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48013
• https://www.exploit-db.com/exploits/7787
• http://dmxready.helpserve.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=93
• http://dmxready.helpserve.com/index.php?_m=news&_a=viewnews&newsid=12Vendor Advisory
• http://secunia.com/advisories/33482Vendor Advisory
• http://www.securityfocus.com/bid/33253Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48013
• https://www.exploit-db.com/exploits/7787

Published

Feb 5, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-0422Dynamic variable evaluation vulnerability in lists/admin.php…
• CVE-2009-0423Directory traversal vulnerability in index.php in Php Photo …
• CVE-2009-0424Cross-site scripting (XSS) vulnerability in sign1.php in AN …
• CVE-2009-0425SQL injection vulnerability in index.php in Blue Eye CMS 1.0…
• CVE-2009-0426SQL injection vulnerability in CategoryManager/upload_image_…
• CVE-2009-0427SQL injection vulnerability in CategoryManager/upload_image_…
• CVE-2009-0429Multiple SQL injection vulnerabilities in Active Bids allow …
• CVE-2009-0430Multiple cross-site scripting (XSS) vulnerabilities in Activ…
• CVE-2009-0431SQL injection vulnerability in Default.asp in LinksPro Stand…
• CVE-2009-0432The installation process for the File Transfer servlet in th…
• CVE-2009-0433Unspecified vulnerability in IBM WebSphere Application Serve…
• CVE-2009-0434PerfServlet in the PMI/Performance Tools component in IBM We…