CVE-2009-1766 - SQL injection vulnerability in index.php in LightOpenCMS 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter

MEDIUM

SQL injection vulnerability in index.php in LightOpenCMS 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter

Published May 22, 2009

6.4

MEDIUM

CVSS 2.0

EPSS 0.85%

SQL injection vulnerability in index.php in LightOpenCMS 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
http://www.securityfocus.com/archive/1/504101/100/0/threaded		mailing-listx_refsource_BUGTRAQ
https://www.exploit-db.com/exploits/8724		exploitx_refsource_EXPLOIT-DB

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published May 22, 2009

Updated Aug 7, 2024

Reserved May 22, 2009

Updated n/a

Status Modified

Modified Jun 16, 2026

Severity n/a

Public date n/a