Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2009-3804

EPSS 0.10% · P27
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-3804

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple SQL injection vulnerabilities in modules/forum/post.php in RunCMS 2M1 allow remote authenticated users to execute arbitrary SQL commands via (1) the pid parameter, which is not properly handled by the store function in modules/forum/class/class.forumposts.php, or (2) the topic_id parameter.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Runcms SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
RunCMS是国外的一个开源CMS，功能上包含了建站所需要的大部分功能。 RunCMS没有对/modules/forum/post.php的"pid"和"forum"参数值进行适当的审查，导致RunCMS的modules/forum/post.php中存在多个SQL注入漏洞。远程验证用户可以借助未经modules/forum/class/class.forumposts.php中的存储函数适当处理过的pid参数或topic_id参数，执行任意SQL指令。 该漏洞被证实存在于2M1版本中。其它版本也可能受到
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2009-3804

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-3804

请登录查看更多情报信息。

Same Patch Batch · n/a · 2009-10-27 · 15 CVEs total

CVE-2009-3801OpenDocMan SQL注入漏洞
CVE-2009-3802Amiro.CMS输入验证漏洞
CVE-2009-3803Amiro.CMS跨站脚本攻击漏洞
CVE-2009-3805Gpg4win远程拒绝服务漏洞
CVE-2009-3806DedeCMS SQL注入漏洞
CVE-2009-3807MixVibes 缓冲区溢出漏洞
CVE-2009-3808MixSense DJ Studio拒绝服务攻击漏洞
CVE-2009-3809Acoustica MP3 Audio Mixer缓冲区溢出漏洞
CVE-2009-3810Acoustica MP3 Audio Mixer 缓冲区溢出漏洞
CVE-2009-3811AssistantTools Music Tag Editor 1.61 缓冲区溢出漏洞
CVE-2009-3812Otslabs OtsAV DJ 缓冲区溢出漏洞
CVE-2009-3813RunCMS 2m1 SQL注入漏洞
CVE-2009-3814RunCMS 2m1 代码注入漏洞
CVE-2009-3815RunCMS 2M1信息泄露漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2009-3804

No comments yet

Leave a comment