CVE-2009-2010 | BDVDB-2026-36895 Detail

Description#

Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 1.9 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) thread parameter to messageboard.php, (2) member parameter to profile.php, (3) pid parameter to gallery/index.php, and the (4) fcms_login_id cookie parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/35039
http://www.securityfocus.com/bid/34935
https://www.exploit-db.com/exploits/8671
http://www.securityfocus.com/archive/1/503477/100/0/threaded
http://www.vupen.com/english/advisories/2009/1306

Exploit#

https://www.exploit-db.com/exploits/8671

History#

Version 12009-06-08Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.