← Database

CVE-2009-2394

HIGH CVSS: 7.5 Published: 2009-07-09 Modified: 2026-06-16

Description

SQL injection vulnerability in cat.php in SMSPages 1.0 in Mr.Saphp Arabic Script Mobile (aka Messages Library) 2.0 allows remote attackers to execute arbitrary SQL commands via the CatID parameter.

Affected Platforms

Mr Saphp Arabic Mobile Messages LibrarySmspages Smspages

Weakness Type

CWE-89

References