CVE-2009-3313 EXPLOIT
6.5
MEDIUM · CVSS 2.0 · EPSS 1.1% (pctl 64)
Patch early
A public exploit exists.
Description
Multiple SQL injection vulnerabilities in FMyClone 2.3 allow remote attackers to execute arbitrary SQL commands via the comp parameter to (1) index.php and (2) editComments.php, and (3) allow remote authenticated administrators to execute arbitrary SQL commands via the id parameter in a comment action to edit.php.
Scoring
| CVSS | 6.5 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:S/C:P/I:P/A:P |
| EPSS | 1.08% — more likely to be exploited than 64% of all CVEs |
| Weakness | CWE-89 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2009-09-23 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| fmyclone | fmyclone |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | FMyClone 2.3 - Multiple SQL Injections | 2009-09-17 |
References
- http://osvdb.org/58182
- http://osvdb.org/58183
- http://osvdb.org/58184
- http://secunia.com/advisories/36778
- http://www.exploit-db.com/exploits/9711
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53329
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53330
- http://osvdb.org/58182
- http://osvdb.org/58183
- http://osvdb.org/58184
- http://secunia.com/advisories/36778
- http://www.exploit-db.com/exploits/9711
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53329
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53330
→ the Explorer · watch your stack · NVD