CVE-2009-4621

SQL injection vulnerability in the JiangHu Inn plugin 1.1 and earlier for Discuz! allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action to forummission.php.

Affected products

Discuzx

Patching Jianghu Inn

≤ 1.1

Fix

Available

CVSS 2.0

7.5 HIGH

EPSS

1.0% (61th percentile)

Weakness

CWE-89

NVD status

Modified

Published

2010-01-18