CVE-2009-1247

Acutecp - SQL Injection

Title source: rule

Description

SQL injection vulnerability in login.php in Acute Control Panel 1.0.0 allows remote attackers to execute arbitrary SQL commands via the username parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by SirGod · textwebappsphp

https://www.exploit-db.com/exploits/8291

View Code ZIP pw:eip

References (4)

[Vendor Advisory] http://secunia.com/advisories/34485

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/49444

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/34265

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/8291

Scores

EPSS 0.3181

EPSS Percentile 96.7%

Classification

CWE

CWE-89

Status draft

Affected Products (1)

acutecp.rediscussed/acutecp

Timeline

Published Apr 06, 2009

Tracked Since Feb 18, 2026