← Database

CVE-2009-3185

HIGH CVSS: 7.5 Published: 2009-09-15 Modified: 2026-06-16

Description

SQL injection vulnerability in plugin.php in the Crazy Star plugin 2.0 for Discuz! allows remote authenticated users to execute arbitrary SQL commands via the fmid parameter in a view action.

Affected Platforms

Comsenz Crazy Star PluginComsenz Discuz\!

Weakness Type

CWE-89

References