Vulnerability Description
SQL injection vulnerability in fichero.php in MorcegoCMS 1.7.6 and earlier allows remote attackers to execute arbitrary SQL commands via the query string.
CVSS Score
7.5
HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Morcego | Morcegocms | <= 1.7.6 |
Related Weaknesses (CWE)
References
- http://osvdb.org/55796
- http://secunia.com/advisories/35778Vendor Advisory
- http://www.exploit-db.com/exploits/9121
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51658
- http://osvdb.org/55796
- http://secunia.com/advisories/35778Vendor Advisory
- http://www.exploit-db.com/exploits/9121
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51658
FAQ
What is CVE-2009-3713?
CVE-2009-3713 is a vulnerability with a CVSS score of 7.5 (HIGH). SQL injection vulnerability in fichero.php in MorcegoCMS 1.7.6 and earlier allows remote attackers to execute arbitrary SQL commands via the query string.
How severe is CVE-2009-3713?
CVE-2009-3713 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2009-3713?
Check the references section above for vendor advisories and patch information. Affected products include: Morcego Morcegocms.