CVE-2009-4791

no score yetEPSS 1.3%

Multiple SQL injection vulnerabilities in Family Connections (aka FCMS) before 1.8.2 allow remote attackers to execute arbitrary SQL commands via the (1) letter parameter to addressbook.php, (2) id parameter to recipes.php, (3) year parameter to register.php, (4) poll_id parameter to home.php, and (5) email parameter to lostpw.php.

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2010-04-22
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ryan_haudenschilt:family_connections

References

http://secunia.com/advisories/34503
http://sourceforge.net/project/shownotes.php?release_id=672266
http://sourceforge.net/tracker/?func=detail&aid=2722736&group_id=189733&atid=930513
http://www.exploit-db.com/exploits/8319
http://www.familycms.com/blog/2009/03/fcms-182-released/

Check your stack JSON