Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2009-0121

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Goople CMS 1.8.2版本中的frontpage.php存在SQL注入漏洞。远程攻击者可以借助密码参数，执行任意的SQL指令。

AI Predicted 9.8 Difficulty: Easy EPSS 0.89% · P56

Public Exploits 1

ExploitDB · 1 EDB-7683#CVE-2009-0121 [webapps]
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2009-0121

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
SQL injection vulnerability in frontpage.php in Goople CMS 1.8.2 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Goople CMS 'password'参数 SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Goople CMS 1.8.2版本中的frontpage.php存在SQL注入漏洞。远程攻击者可以借助密码参数，执行任意的SQL指令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2009-0121

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-0121

请登录查看更多情报信息。

Vendor Advisories for CVE-2009-0121 (1)

Same Patch Batch · n/a · 2009-01-15 · 24 CVEs total

CVE-2009-0126 Berkeley Open Infrastructure for Network授权问题漏洞
CVE-2009-0120 IBM WebSphere DataPower XML Security Gateway XS40 远程拒绝服务漏洞
CVE-2003-1567 microsoft internet_information_services 信息泄露漏洞
CVE-2003-1566 Microsoft IIS服务跟踪日志绕过漏洞
CVE-1999-1593 Microsoft Windows Internet Naming Service 后置链接漏洞
CVE-2009-0133 microsoft html_help_workshop 缓冲区溢出漏洞
CVE-2009-0132 Sun Solaris aio_suspend()整数溢出本地拒绝服务漏洞
CVE-2009-0131 Sun OpenSolaris 'posix_fallocate(3C)' System Call 本地拒绝服务漏洞
CVE-2009-0130 erlang _nil_ 授权问题漏洞
CVE-2009-0129 Perl-Openssl libcrypt-openssl-dsa-perl安全绕过漏洞
CVE-2009-0128 Llnl Simple Linux Utility for Resource Management crypto_openssl.c安全绕过漏洞
CVE-2009-0127 debian 授权问题漏洞
CVE-2008-5902 xrdp ‘xrdp/xrdp_bitmap.c’多个缓冲区溢出漏洞
CVE-2009-0125 Nessus授权问题漏洞
CVE-2009-0124 American Radio Relay League tqsllib程序openssl_cert.cpp 绕过漏洞
CVE-2009-0123 apple mac_os_x 信息泄露漏洞
CVE-2009-0122 HP Linux Imaging and Printing (HPLIP) "hplip.postinst" 权限许可和访问控制漏洞
CVE-2009-0029 Linux kernel 输入验证错误漏洞
CVE-2008-5907 libpng 未明漏洞
CVE-2008-5906 KTorrent web界面插件 Eval代码注入漏洞

Showing top 20 of 24 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2009-0121

No comments yet

Leave a comment