CVE-2009-3118

no score yetEPSS 1.2%

SQL injection vulnerability in mod/poll/comment.php in the vote module in Danneo CMS 0.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the comtext parameter, in conjunction with crafted comname and comtitle parameters, in a poll action to index.php, related to incorrect input sanitization in base/danneo.function.php.

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2009-09-09
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

danneo:cms

References

http://packetstormsecurity.org/0908-exploits/danneo052-sql.txt
http://secunia.com/advisories/36440
http://www.vupen.com/english/advisories/2009/2459
http://packetstormsecurity.org/0908-exploits/danneo052-sql.txt
http://secunia.com/advisories/36440

Check your stack JSON