7.5
CVSSv2

CVE-2009-3543

Published: 02/10/2009 Updated: 19/09/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in _phenotype/admin/login.php in Phenotype CMS prior to 2.9 allows remote malicious users to execute arbitrary SQL commands via the user parameter (aka the login name).

Vulnerable Product Search on Vulmon Subscribe to Product

phenotype-cms phenotype cms 2.1

phenotype-cms phenotype cms 2.4

phenotype-cms phenotype cms 2.3

phenotype-cms phenotype cms 2.5.1

phenotype-cms phenotype cms 2.0

phenotype-cms phenotype cms 2.2

phenotype-cms phenotype cms 2.6

phenotype-cms phenotype cms

phenotype-cms phenotype cms 1.0

phenotype-cms phenotype cms 2.5

phenotype-cms phenotype cms 2.7

Exploits

##################################################################################### #### Phenotype v28 Blind Sql Injection #### ##################################################################################### # # #AUTHO ...