HIGH🇵🇱 Wersja polska

CVE-2009-2359

CVSS 7.5v2.0pub. 2009-07-07upd. 2026-04-23

Multiple SQL injection vulnerabilities in TekRADIUS 3.0 allow context-dependent attackers to execute arbitrary SQL commands via (1) the GUI client, as demonstrated by input to the Browse Users text box in the Users tab; or (2) the command-line client, as demonstrated by a certain trcli -r command.

CVSS Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Yasinkaplan Tekradius

    APP
    Yasinkaplan
    3.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
SQLi
CWE
References

Related vulnerabilities

CVE-2009-2357HIGH10.0ten sam produkt

The default configuration of TekRADIUS 3.0 uses the sa account to communicate with Microsoft SQL Server, which...

CVE-2009-2358MEDIUM4.6ten sam produkt

TekRADIUS 3.0 uses BUILTIN\Users:R permissions for the TekRADIUS.ini file, which allows local users to obtain ...