Vulnerability Database

296,147

Total vulnerabilities in the database

CVE-2009-3118

SQL injection vulnerability in mod/poll/comment.php in the vote module in Danneo CMS 0.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the comtext parameter, in conjunction with crafted comname and comtitle parameters, in a poll action to index.php, related to incorrect input sanitization in base/danneo.function.php.

  • Published: Sep 10, 2009
  • Updated: Apr 13, 2023
  • CVE: CVE-2009-3118
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

OWASP TOP 10:

Software From Fixed in
danneo / cms 0.5.1 0.5.1.x
danneo / cms - 0.5.2.x
danneo / cms 0.5 0.5.x