CVE-2009-0825

ALTO 7.5CVE-2009-0825 · Published 09/03/2009 · updated 16/06/2026

In breve

CVE-2009-0825 è una vulnerabilità ALTO (CVSS 7.5) che riguarda tinx/cms (torben sorensen).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.3%, superiore al 69.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
tinx/cms torben_sorensen	`= 3.0≤ 3.5`	No fix yet

Description

SQL injection vulnerability in system/rss.php in TinX/cms 3.x before 3.5.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

References

en.securitylab.ru/lab/PT-2009-13
secunia.com/advisories/34178
sourceforge.net/project/showfiles.php · Patch
sourceforge.net/project/shownotes.php
securityfocus.com/archive/1/501547/100/0/threaded
securityfocus.com/bid/34021 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/49115

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free