Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2009-3217

EPSS 0.25% · P48
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-3217

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
SQL injection vulnerability in the admin module in iWiccle 1.01 allows remote attackers to execute arbitrary SQL commands via the member_id parameter in an edit_user action to index.php.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
wiccle index.php SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
iWiccle 1.01版本的管理模块中存在SQL注入漏洞。远程攻击者可以借助对index.php的一个edit_user操作中的member_id参数,执行任意SQL指令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2009-3217

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-3217

登录查看更多情报信息。

Same Patch Batch · n/a · 2009-09-16 · 26 CVEs total

CVE-2009-3202ULoKI PHP Forum search.php 跨站脚本攻击漏洞
CVE-2009-3214photodex proshow_gold 缓冲区溢出漏洞
CVE-2009-3213broid 缓冲区溢出漏洞
CVE-2009-3212dimofinf infinity_script SQL注入漏洞
CVE-2009-3211dimofinf infinity_script 路径游历漏洞
CVE-2009-3210joao_ventura print 跨站脚本攻击漏洞
CVE-2009-3209Raizlabs PHP eMail Manager remove.php SQL注入漏洞
CVE-2009-3208prakashatma_mishra phpfreebb SQL注入漏洞
CVE-2009-3207drewish imagecache 权限许可和访问控制漏洞
CVE-2009-3206Drewish ImageCache跨站脚本攻击漏洞
CVE-2009-3205CBAuthority main.php SQL注入漏洞
CVE-2009-3204Stivaforum stiva_forum 跨站脚本攻击漏洞
CVE-2009-3203Ajsquare AJ Auction Pro OOPD store.php SQL注入漏洞
CVE-2009-3215Php-Shop-System IXXO Cart SQL注入漏洞
CVE-2009-3227AlmondSoft Almond Classifieds index.php 跨站脚本攻击漏洞
CVE-2009-3226AlmondSoft Almond Classifieds SQL注入漏洞
CVE-2009-3225AlmondSoft Almond Classifieds 跨站脚本攻击漏洞
CVE-2009-3224Classified-Software Super Mod System index.php SQL注入漏洞
CVE-2009-3223Inout Adserver ppc-add-keywords.php SQL注入漏洞
CVE-2009-3222FreeWebScriptz Honest Traffic index.php跨站脚本攻击漏洞

Showing top 20 of 26 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2009-3217

No comments yet


Leave a comment