CVE-2009-1208: AUTH2DB

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

SQL injection vulnerability in auth2db 0.2.5, and possibly other versions before 0.2.7, uses the addslashes function instead of the mysql_real_escape_string function, which allows remote attackers to conduct SQL injection attacks using multibyte character encodings.

Affected products

• AUTH2DB AUTH2DB: version 0.1.0 only; version 0.1.2 only; version 0.1.3 only; version 0.1.4 only; version 0.1.5 only; version 0.1.6 only; …
• AUTH2DBAUTH2DB 0.1.1: any version

Published 2009-04-01. Last modified 2026-06-16.