← Database

CVE-2009-2276

HIGH CVSS: 7.5 Published: 2009-07-01 Modified: 2026-06-16

Description

SQL injection vulnerability in voteforus.php in the Vote For Us extension 1.0.1 and earlier for PunBB allows remote attackers to execute arbitrary SQL commands via the out parameter.

Affected Platforms

Punbb PunbbBiglle Vote For Us Extension

Weakness Type

CWE-89

References