CVE-2009-4669

no score yetEPSS 0.9%

beaussier roomphplanning: no CVSS score yet. EPSS 0.9% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in RoomPHPlanning 1.6 allow remote attackers to execute arbitrary SQL commands via (1) the loginus parameter to Login.php or (2) the Old Password field to changepwd.php, and allow (3) remote authenticated administrators to execute arbitrary SQL commands via the id parameter to admin/userform.php.

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2010-03-05
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

beaussier:roomphplanning

References

http://secunia.com/advisories/35237
http://www.exploit-db.com/exploits/8797
http://secunia.com/advisories/35237
http://www.exploit-db.com/exploits/8797

Check your stack JSON