Approved changes feed: RSS · Atom

cpe:2.3:a:auth2db:auth2db:0.2.4:*:*:*:*:*:*:*

part: a version: 0.2.4 update: *

VendorAuth2Db (6dd2c16e-2bd0-5f88-96d1-6147d89752d1)
ProductAuth2Db (4576b60a-d2e3-5dc4-82b8-909ca91969fe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/unforgiven512/auth2db purl2cpe 2026-06-01 10:12:59.358784

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-1208 vulnerable 2026-06-08 04:51:13.811080 Details available
SQL injection vulnerability in auth2db 0.2.5, and possibly other versions before 0.2.7, uses the addslashes function instead of the mysql_real_escape_string function, which allows remote attackers to conduct SQL injection attacks using multibyte character encodings.
Published: 2009-04-01T10:00:00.000Z
Updated: 2024-08-07T05:04:49.335Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.