Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2009-3801

EPSS 0.37% · P59
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-3801

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
SQL injection vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to execute arbitrary SQL commands via the frmpass (aka Password) parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
OpenDocMan SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OpenDocMan是一个免费的符合ISO 17025和世界动物卫生组织文件管理标准的文件管理系统。 OpenDocMan存在SQL注入漏洞。由于index.php中的SQL查询语句没有对用户输入的"frmuser"和"frmpass"参数值进行适当地审查，攻击者可以利用该漏洞进行SQL注入攻击。 该漏洞被证实存在于1.2.5版本中。其它版本可能也会受到影响。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2009-3801

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-3801

请登录查看更多情报信息。

Same Patch Batch · n/a · 2009-10-27 · 15 CVEs total

CVE-2009-3802Amiro.CMS输入验证漏洞
CVE-2009-3803Amiro.CMS跨站脚本攻击漏洞
CVE-2009-3804Runcms SQL注入漏洞
CVE-2009-3805Gpg4win远程拒绝服务漏洞
CVE-2009-3806DedeCMS SQL注入漏洞
CVE-2009-3807MixVibes 缓冲区溢出漏洞
CVE-2009-3808MixSense DJ Studio拒绝服务攻击漏洞
CVE-2009-3809Acoustica MP3 Audio Mixer缓冲区溢出漏洞
CVE-2009-3810Acoustica MP3 Audio Mixer 缓冲区溢出漏洞
CVE-2009-3811AssistantTools Music Tag Editor 1.61 缓冲区溢出漏洞
CVE-2009-3812Otslabs OtsAV DJ 缓冲区溢出漏洞
CVE-2009-3813RunCMS 2m1 SQL注入漏洞
CVE-2009-3814RunCMS 2m1 代码注入漏洞
CVE-2009-3815RunCMS 2M1信息泄露漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2009-3801

No comments yet

Leave a comment