SQL Injection Vulnerability in OpenDocMan by OpenDocMan
CVE-2009-3801

Currently unrated

Key Information:

Vendor

Opendocman

Status
Opendocman
Vendor
CVE Published:
27 October 2009

What is CVE-2009-3801?

The SQL injection vulnerability found in the index.php file of OpenDocMan 1.2.5 allows remote attackers to send specially crafted requests via the Password parameter. This flaw can lead to the execution of arbitrary SQL commands, potentially exposing sensitive information and compromising the integrity of the database.

References

http://secunia.com/advisories/30750
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.