CVE-2009-3806: SQL Injection
SQL injection vulnerability in feedbackjs.php in DedeCMS 5.1 allows remote attackers to execute arbitrary SQL commands via the arcurl parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-3806?
CVE-2009-3806 is classified as a high severity vulnerability due to its potential for remote SQL command execution.
How do I fix CVE-2009-3806?
To fix CVE-2009-3806, update DedeCMS to a version that is not vulnerable to SQL injection, preferably a version higher than 5.1.
What types of attacks are possible with CVE-2009-3806?
CVE-2009-3806 allows attackers to execute arbitrary SQL commands, which can lead to data manipulation and unauthorized access.
What software is affected by CVE-2009-3806?
CVE-2009-3806 affects DedeCMS version 5.1 and allows for SQL injection attacks through the feedback_js.php file.
Is there any known exploit for CVE-2009-3806?
Yes, there are known exploits that leverage the SQL injection vulnerability in CVE-2009-3806 to execute malicious SQL commands.