high7.5
CVE-2009-3788
SQL injection vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to execute arbitrary SQL commands via the frmuser (aka Username) parameter.
Impact
SQL injection vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to execute arbitrary SQL commands via the frmuser (aka Username) parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opendocman | Opendocman | Version 1.2.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/59301
- http://secunia.com/advisories/30750
- http://www.packetstormsecurity.org/0910-exploits/opendocman-sqlxss.txt
- http://www.securityfocus.com/bid/36777
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53886
- http://osvdb.org/59301
- http://secunia.com/advisories/30750
- http://www.packetstormsecurity.org/0910-exploits/opendocman-sqlxss.txt
- http://www.securityfocus.com/bid/36777
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53886