CVE-2009-3543 - SQL injection vulnerability in _phenotype/admin/login.php in Phenotype CMS before 2.9 allows remote attackers to execute arbitrary SQL commands via the user parameter (aka the login name)

Back Back to CVE browser

HIGH

SQL injection vulnerability in _phenotype/admin/login.php in Phenotype CMS before 2.9 allows remote attackers to execute arbitrary SQL commands via the user parameter (aka the login name)

Published Oct 2, 2009

7.5

HIGH

CVSS 2.0

EPSS 2.00%

Description

SQL injection vulnerability in _phenotype/admin/login.php in Phenotype CMS before 2.9 allows remote attackers to execute arbitrary SQL commands via the user parameter (aka the login name).

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (5)

http://secunia.com/advisories/35792
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/exploits/9107
exploitx_refsource_EXPLOIT-DB
http://www.osvdb.org/55799
vdb-entryx_refsource_OSVDBExploit
http://www.phenotype-cms.com/wiki/development-changelog
x_refsource_CONFIRMVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/51634
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/35792		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/exploits/9107		exploitx_refsource_EXPLOIT-DB
http://www.osvdb.org/55799		vdb-entryx_refsource_OSVDBExploit
http://www.phenotype-cms.com/wiki/development-changelog		x_refsource_CONFIRMVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/51634		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 2, 2009

Updated Aug 7, 2024

Reserved Oct 2, 2009

Link CVE-2009-3543

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-3543

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-3543

Description

Affected products

Remediation

References (5)

Change history (0)