CVE-2009-3491

Kinfusion Com Sportfusion - SQL Injection

Title source: rule

Description

SQL injection vulnerability in the Kinfusion SportFusion (com_sportfusion) component 0.2.2 through 0.2.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid[0] parameter in a teamdetail action to index.php.

Exploits (1)

exploitdb WORKING POC VERIFIED

by kaMtiEz · textwebappsphp

https://www.exploit-db.com/exploits/33237

View Code ZIP pw:eip

References (3)

[Exploit] http://packetstormsecurity.org/0909-exploits/joomlasportfusion-sql.txt

[Vendor Advisory] http://secunia.com/advisories/36844

[Exploit] http://www.securityfocus.com/bid/36481

Scores

EPSS 0.0015

EPSS Percentile 35.9%

Classification

CWE

CWE-89

Status draft

Affected Products (2)

kinfusion/com_sportfusion

Timeline

Published Sep 30, 2009

Tracked Since Feb 18, 2026