Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-3752. PoCs published by LMaster.
AI-analyzed exploit summary This is a writeup detailing multiple vulnerabilities in Opial 1.0, including arbitrary file upload, SQL injection, and XSS. It provides step-by-step instructions and demo URLs but does not include executable exploit code.
Description
SQL injection vulnerability in home.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the genres_parent parameter.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by LMaster · textwebappsphp
https://www.exploit-db.com/exploits/9122
This is a writeup detailing multiple vulnerabilities in Opial 1.0, including arbitrary file upload, SQL injection, and XSS. It provides step-by-step instructions and demo URLs but does not include executable exploit code.
Classification
Writeup 90%
Attack Type
Sqli | Xss | Info Leak
Complexity
Trivial
Reliability
Reliable
Target:
Opial 1.0
No auth needed
Prerequisites:
Access to the target application · JavaScript disabled for file upload
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (4)
Core 4
Core References
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/35677
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/51678
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/35641
Exploit, Third Party Advisory exploit
x_refsource_exploit-db
http://www.exploit-db.com/exploits/9122
Scores
EPSS
0.0097
EPSS Percentile
57.5%
Details
CWE
CWE-89
Status
published
Products (1)
opial/opial
1.0
Published
Oct 22, 2009
Tracked Since
Feb 18, 2026