CVE-2009-3313

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-09-23 · updated 2026-06-16
Weakness: CWE-89

Description

Multiple SQL injection vulnerabilities in FMyClone 2.3 allow remote attackers to execute arbitrary SQL commands via the comp parameter to (1) index.php and (2) editComments.php, and (3) allow remote authenticated administrators to execute arbitrary SQL commands via the id parameter in a comment action to edit.php.

Affected products

Fmyclone: 2.3

References

http://osvdb.org/58182
http://osvdb.org/58183
http://osvdb.org/58184
http://secunia.com/advisories/36778
http://www.exploit-db.com/exploits/9711
https://exchange.xforce.ibmcloud.com/vulnerabilities/53329
https://exchange.xforce.ibmcloud.com/vulnerabilities/53330
http://osvdb.org/58182
http://osvdb.org/58183
http://osvdb.org/58184
http://secunia.com/advisories/36778
http://www.exploit-db.com/exploits/9711

Get alerted when CVE-2009-3313 or the next vulnerability affects your stack