CVE-2009-3804

MEDIUM 6.5CVE-2009-3804 · Published 27/10/2009 · updated 16/06/2026

In short

CVE-2009-3804 is a MEDIUM (CVSS 6.5) vulnerability affecting runcms (runcms).
Chance of exploitation in the next 30 days (EPSS): 0.81%, higher than 56.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
runcms runcms	`= 2m1`	No fix yet

Description

Multiple SQL injection vulnerabilities in modules/forum/post.php in RunCMS 2M1 allow remote authenticated users to execute arbitrary SQL commands via (1) the pid parameter, which is not properly handled by the store function in modules/forum/class/class.forumposts.php, or (2) the topic_id parameter.

References

retrogod.altervista.org/9sg_runcms_store_sql.html · Exploit
secunia.com/advisories/37137 · Vendor Advisory

More vulnerabilities in runcms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free