1. Home
  2. CVE Database
  3. CVE-2009-3175
HIGH · 7.5

CVE-2009-3175

Multiple SQL injection vulnerabilities in Model Agency Manager PRO (formerly Modeling Agency Content Management Script) allow remote attackers to execute arbitrary SQL commands via the user_id paramet...

Vulnerability Description

Multiple SQL injection vulnerabilities in Model Agency Manager PRO (formerly Modeling Agency Content Management Script) allow remote attackers to execute arbitrary SQL commands via the user_id parameter to (1) view.php, (2) photos.php, and (3) motm.php; and the (4) id parameter to forum_message.php.

CVSS Score

7.5

HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL

Affected Products

VendorProductVersions
BoldfxModel Agency Manager Pro-

Related Weaknesses (CWE)

CWE-89

References

FAQ

What is CVE-2009-3175?

CVE-2009-3175 is a vulnerability with a CVSS score of 7.5 (HIGH). Multiple SQL injection vulnerabilities in Model Agency Manager PRO (formerly Modeling Agency Content Management Script) allow remote attackers to execute arbitrary SQL commands via the user_id paramet...

How severe is CVE-2009-3175?

CVE-2009-3175 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2009-3175?

Check the references section above for vendor advisories and patch information. Affected products include: Boldfx Model Agency Manager Pro.