CVE-2009-2895
phpsugar ultimate regnow affiliate: no CVSS score yet. EPSS 0.9% chance of exploitation in the next 30 days.
SQL injection vulnerability in rss.php in Ultimate Regnow Affiliate (URA) 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter.
- EPSS
- 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
- CWE
- CWE-89
- Published
- Modified
- Record from
- the NVD, synced
Affected
- phpsugar:ultimate_regnow_affiliate