CVE-2009-1038

no score yetEPSS 0.9%

yap yap blog: no CVSS score yet. EPSS 0.9% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in YAP Blog 1.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) image_id parameter to comments.php, and remote authenticated administrators to execute arbitrary SQL commands via the (2) user parameter in a modif action to admin/index.php.

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2009-03-20
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

yap:yap_blog

References

http://osvdb.org/52761
http://osvdb.org/52762
http://www.securityfocus.com/bid/34274
https://www.exploit-db.com/exploits/8217
http://osvdb.org/52761

Check your stack JSON