CVE-2009-4350
Last modified
CVE-2009-4350 is a vulnerability of currently unknown severity. SQL injection vulnerability in index.php in Arctic Issue Tracker 2.1.1 allows remote attackers to execute arbitrary SQL commands via the (1) matchings[id] or (2) matchings[title] parameters in a Login action to an unspecified program, or (3) the matchings[id] parameter in a search action to index.php, a different vector than CVE-2008-3250. NOTE: some of these details are obtained from third party information.. EPSS estimates a 1.16% chance of exploitation in the next 30 days.
Description
SQL injection vulnerability in index.php in Arctic Issue Tracker 2.1.1 allows remote attackers to execute arbitrary SQL commands via the (1) matchings[id] or (2) matchings[title] parameters in a Login action to an unspecified program, or (3) the matchings[id] parameter in a search action to index.php, a different vector than CVE-2008-3250. NOTE: some of these details are obtained from third party information.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Boldfx | Arctic Issue Tracker | 2.1.1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2009-4350?
How severe is CVE-2009-4350?
How do I fix CVE-2009-4350?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2009
- CVE-2009-4344Cross-site scripting (XSS) vulnerability in the ZID Linklist…
- CVE-2009-4345Cross-site scripting (XSS) vulnerability in the vShoutbox (v…
- CVE-2009-4346Cross-site scripting (XSS) vulnerability in the Frontend new…
- CVE-2009-4347Cross-site scripting (XSS) vulnerability in daloradius-users…
- CVE-2009-4348Cross-site scripting (XSS) vulnerability in index.php in Har…
- CVE-2009-4349Cross-site request forgery (CSRF) vulnerability in administr…
- CVE-2009-4351SQL injection vulnerability in ADMIN/loginaction.php in WSCr…
- CVE-2009-4352Multiple cross-site scripting (XSS) vulnerabilities in Trans…
- CVE-2009-4353The Mobile Edition of TransWARE Active! mail 2003 build 2003…
- CVE-2009-4354TransWARE Active! mail 2003 build 2003.0139.0871 and earlier…
- CVE-2009-4355Memory leak in the zlib_stateful_finish function in crypto/c…
- CVE-2009-4356Multiple integer overflows in the jpeg.w5s and png.w5s filte…
Are you affected by CVE-2009-4350?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST