Vulnerability Details CVE-2009-3217
SQL injection vulnerability in the admin module in iWiccle 1.01 allows remote attackers to execute arbitrary SQL commands via the member_id parameter in an edit_user action to index.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 50.9%
CVSS Severity
CVSS v2 Score 7.5
Products affected by CVE-2009-3217
-
cpe:2.3:a:wiccle:iwiccle:1.01