CVE-2009-1853 describes multiple SQL injection vulnerabilities in Kensei Board 2.0 BETA and earlier versions, specifically within the index.php file. Attackers can exploit these flaws by manipulating the 'f' and 't' parameters during a 'showforum' action to execute arbitrary SQL commands. This vulnerability carries a high severity CVSS score of 7.5, indicating it can be exploited remotely with low complexity, potentially leading to unauthorized access, modification, or deletion of data. While there is no evidence of active exploitation in the wild or inclusion in the KEV catalog, exploit code is publicly available on ExploitDB, suggesting a potential risk for unpatched systems.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2.0.0bCPE matchmatch criteria | cpe:2.3:a:kenseiboard:kensei_board:*:*:*:*:*:*:*:* | ||
1.1.0CPE matchmatch criteria | cpe:2.3:a:kenseiboard:kensei_board:1.1.0:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:P/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.