CVE-2009-4795

MEDIUM · CVSS 6.8 EPSS 2.03%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2010-04-22 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2009-4795

Severity

MEDIUM

CVSS

6.8

EPSS

2.03%

Original NVD Description

Multiple SQL injection vulnerabilities in Xlight FTP Server before 3.2.1, when ODBC authentication is enabled, allow remote attackers to execute arbitrary SQL commands via the (1) USER (aka username) or (2) PASS (aka password) command.