VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 1, 2009· Updated Apr 23, 2026

CVE-2009-1851

CVE-2009-1851

Description

SQL injection vulnerability in include.php in phpBugTracker 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

33
  • Benjamin Curtis/Phpbugtracker33 versions
    cpe:2.3:a:benjamin_curtis:phpbugtracker:*:*:*:*:*:*:*:*+ 32 more
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:*:*:*:*:*:*:*:*range: <=1.0.4
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:0.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:0.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:0.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:0.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:0.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:0.1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:0.1.6:*:*:*:*:*:*:*
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:0.1.7:*:*:*:*:*:*:*
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:0.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:0.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:0.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:0.3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:0.3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:0.3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:0.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:0.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:0.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:0.6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:0.6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:0.6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:0.7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:0.7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:0.7.2:*:*:*:*:*:*:*
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:0.8.0:*:*:*:*:*:*:*
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:0.8.1:*:*:*:*:*:*:*
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:0.8.2:*:*:*:*:*:*:*
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:0.9.0:*:*:*:*:*:*:*
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:0.9.1:*:*:*:*:*:*:*
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:1.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:1.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:benjamin_curtis:phpbugtracker:1.x:dev1:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.