← Database

CVE-2009-3543

HIGH CVSS: 7.5 Published: 2009-10-02 Modified: 2026-06-16

Description

SQL injection vulnerability in _phenotype/admin/login.php in Phenotype CMS before 2.9 allows remote attackers to execute arbitrary SQL commands via the user parameter (aka the login name).

Affected Platforms

Phenotype-Cms Phenotype Cms

Weakness Type

CWE-89

References