CVE-2009-2786
UnknownEPSS 1.01%
Last modified
CVE-2009-2786 is a vulnerability of currently unknown severity. SQL injection vulnerability in reputation.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, and earlier for PunBB allows remote attackers to execute arbitrary SQL commands via the poster parameter.. EPSS estimates a 1.01% chance of exploitation in the next 30 days.
Description
SQL injection vulnerability in reputation.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, and earlier for PunBB allows remote attackers to execute arbitrary SQL commands via the poster parameter.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Reputation | Reputation | <= 2.2.4 |
| Reputation | Reputation | 2.0.4 |
| Reputation | Reputation | 2.2.3 |
References
- http://secunia.com/advisories/36020Vendor Advisory
- http://secunia.com/advisories/36020Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2009-2786?
SQL injection vulnerability in reputation.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, and earlier for PunBB allows remote attackers to execute arbitrary SQL commands via the poster parameter.
How severe is CVE-2009-2786?
Severity scoring for CVE-2009-2786 is pending analysis. The EPSS model estimates a 1.01% probability of exploitation in the next 30 days.
How do I fix CVE-2009-2786?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2009
- CVE-2009-2780Multiple cross-site scripting (XSS) vulnerabilities in 68 Cl…
- CVE-2009-2781SQL injection vulnerability in forum.php in Arab Portal 2.x,…
- CVE-2009-2782SQL injection vulnerability in the JFusion (com_jfusion) com…
- CVE-2009-2783Multiple cross-site scripting (XSS) vulnerabilities in XOOPS…
- CVE-2009-2784Multiple directory traversal vulnerabilities in dit.cms 1.3,…
- CVE-2009-2785Multiple cross-site scripting (XSS) vulnerabilities in PHP O…
- CVE-2009-2787Directory traversal vulnerability in include/reputation/rep_…
- CVE-2009-2788Multiple SQL injection vulnerabilities in Mobilelib GOLD 3 a…
- CVE-2009-2789SQL injection vulnerability in the Permis (com_groups) compo…
- CVE-2009-2790SQL injection vulnerability in cat_products.php in SoftBiz D…
- CVE-2009-2791PHP remote file inclusion vulnerability in pda_projects.php …
- CVE-2009-2792Directory traversal vulnerability in plugings/pagecontent.ph…
Are you affected by CVE-2009-2786?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST