CVE-2009-3313 | BDVDB-2026-38621 Detail

Description#

Multiple SQL injection vulnerabilities in FMyClone 2.3 allow remote attackers to execute arbitrary SQL commands via the comp parameter to (1) index.php and (2) editComments.php, and (3) allow remote authenticated administrators to execute arbitrary SQL commands via the id parameter in a comment action to edit.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://osvdb.org/58183
http://www.exploit-db.com/exploits/9711
http://osvdb.org/58182
http://osvdb.org/58184
http://secunia.com/advisories/36778
https://exchange.xforce.ibmcloud.com/vulnerabilities/53329
https://exchange.xforce.ibmcloud.com/vulnerabilities/53330

Exploit#

http://www.exploit-db.com/exploits/9711

History#

Version 12009-09-23Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.