CVE-2009-2010

MEDIUM 6.5CVE-2009-2010 · Published 08/06/2009 · updated 16/06/2026

In short

CVE-2009-2010 is a MEDIUM (CVSS 6.5) vulnerability affecting family connections cms (haudenschilt).
Chance of exploitation in the next 30 days (EPSS): 0.90%, higher than 59.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
family connections cms haudenschilt	`= 0.1.1= 0.1.2= 0.5= 0.6= 0.8= 0.9= 1.4= 1.8.1= 1.8.2≤ 1.9`	No fix yet

Description

Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 1.9 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) thread parameter to messageboard.php, (2) member parameter to profile.php, (3) pid parameter to gallery/index.php, and the (4) fcms_login_id cookie parameter.

References

secunia.com/advisories/35039 · Vendor Advisory
securityfocus.com/archive/1/503477/100/0/threaded
securityfocus.com/bid/34935 · Exploit
vupen.com/english/advisories/2009/1306 · Vendor Advisory
exploit-db.com/exploits/8671

More vulnerabilities in family connections cms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

family connections cms

haudenschilt

= 0.1.1= 0.1.2= 0.5= 0.6= 0.8= 0.9= 1.4= 1.8.1= 1.8.2≤ 1.9

No fix yet

Description

More vulnerabilities in family connections cms

See all →