CVE-2009-3313

EUVD-2009-3295
Multiple SQL injection vulnerabilities in FMyClone 2.3 allow remote attackers to execute arbitrary SQL commands via the comp parameter to (1) index.php and (2) editComments.php, and (3) allow remote authenticated administrators to execute arbitrary SQL commands via the id parameter in a comment action to edit.php.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 47%
Affected Products (NVD)
VendorProductVersion
fmyclonefmyclone
2.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/58182
http://osvdb.org/58183
http://osvdb.org/58184
http://secunia.com/advisories/36778
http://www.exploit-db.com/exploits/9711
https://exchange.xforce.ibmcloud.com/vulnerabilities/53329
https://exchange.xforce.ibmcloud.com/vulnerabilities/53330
http://osvdb.org/58182
http://osvdb.org/58183
http://osvdb.org/58184
http://secunia.com/advisories/36778
http://www.exploit-db.com/exploits/9711
https://exchange.xforce.ibmcloud.com/vulnerabilities/53329
https://exchange.xforce.ibmcloud.com/vulnerabilities/53330