Vulnerability Details CVE-2009-3313
Multiple SQL injection vulnerabilities in FMyClone 2.3 allow remote attackers to execute arbitrary SQL commands via the comp parameter to (1) index.php and (2) editComments.php, and (3) allow remote authenticated administrators to execute arbitrary SQL commands via the id parameter in a comment action to edit.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 47.6%
CVSS Severity
CVSS v2 Score 6.5
References
- http://osvdb.org/58182
- http://osvdb.org/58183
- http://osvdb.org/58184
- http://secunia.com/advisories/36778
- http://www.exploit-db.com/exploits/9711
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53329
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53330
- http://osvdb.org/58182
- http://osvdb.org/58183
- http://osvdb.org/58184
- http://secunia.com/advisories/36778
- http://www.exploit-db.com/exploits/9711
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53329
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53330