CVE-2009-3788: SQL Injection
Published Oct 26, 2009
·Updated
SQL injection vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to execute arbitrary SQL commands via the frmuser (aka Username) parameter.
Affected Software
1 affected component
OpenDocMan OpenDocMan=1.2.5
Remediation
Patch Available
Event History
Oct 26, 2009
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-3788?
CVE-2009-3788 is considered a moderate severity SQL injection vulnerability.
2
How do I fix CVE-2009-3788?
To fix CVE-2009-3788, update OpenDocMan to the latest version that addresses this vulnerability.
3
What software is affected by CVE-2009-3788?
CVE-2009-3788 specifically affects OpenDocMan version 1.2.5.
4
What type of vulnerability is CVE-2009-3788?
CVE-2009-3788 is classified as an SQL injection vulnerability.
5
What can attackers do with CVE-2009-3788?
Attackers can exploit CVE-2009-3788 to execute arbitrary SQL commands on the affected system.