Unscored CVE-2009-1433 EUVD-2009-1431GHSA-x47g-457g-j4mw

SQL injection vulnerability in File::find (filesystem/File.php) in SilverStripe before 2.3.1 allows remote attackers to execute arbitrary S…

Published Apr 24, 2009 · Updated Sep 17, 2024 · Assigned by mitre

Description

SQL injection vulnerability in File::find (filesystem/File.php) in SilverStripe before 2.3.1 allows remote attackers to execute arbitrary SQL commands via the filename parameter.

References

http://open.silverstripe.com/wiki/ChangeLog/2.3.1
http://open.silverstripe.com/ticket/3721
34485 vdb-entry
34633 third-party-advisory
53589 vdb-entry