CVE-2009-3801

OpenDocMan 1.2.5 - SQL Injection via Password Parameter

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to execute arbitrary SQL commands via the frmpass (aka Password) parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

References (1)

Core 1
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30750

Scores

EPSS 0.0101
EPSS Percentile 59.6%

Details

CWE
CWE-89
Status published
Products (1)
opendocman/opendocman 1.2.5
Published Oct 27, 2009
Tracked Since Feb 18, 2026