CVE-2009-0646

🗓️ 18 Feb 2009 23:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 49 Views🌐 WEB

4Site CMS 2.6 SQL injection vulnerabilitie

Reporter	Title	Published	Views	Family All 6
Circl	CVE-2009-0646	3 Feb 200900:00	–	circl
Cvelist	CVE-2009-0646	18 Feb 200923:00	–	cvelist
EUVD	EUVD-2009-0649	7 Oct 202500:30	–	euvd
NVD	CVE-2009-0646	18 Feb 200923:30	–	nvd
Prion	Sql injection	18 Feb 200923:30	–	prion
Prion	Sql injection	3 Nov 201020:00	–	prion

NVD

Node

4site 4site_cmsRange≤2.6

Source	Link
exploit-db	www.exploit-db.com/exploits/7964
secunia	www.secunia.com/advisories/33733
osvdb	www.osvdb.org/51806
osvdb	www.osvdb.org/51809
securityfocus	www.securityfocus.com/bid/33594
securityfocus	www.securityfocus.com/archive/1/514376/100/0/threaded
htbridge	www.htbridge.ch/advisory/sql_injection_in_4site_cms.html
wsec	www.wsec.ru/wsec-09-002-4site-cms-26-multiple-sql-injections/
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/48483
osvdb	www.osvdb.org/51808

Parameter	Position	Path	Description	CWE
login	request body	pcgi/4site.pl	SQL injection via login/password parameters in pcgi/4site.pl	CWE-89
password	request body	pcgi/4site.pl	SQL injection via login/password parameters in pcgi/4site.pl	CWE-89
page	query param	print/print.shtml	SQL injection via page parameter in print/print.shtml	CWE-89
s	query param	portfolio/index.shtml	SQL injection via s and i parameters in portfolio/index.shtml	CWE-89
i	query param	portfolio/index.shtml	SQL injection via s and i parameters in portfolio/index.shtml	CWE-89
h	query param	hotel/index.php	SQL injection via h parameter in hotel/index.php	CWE-89
id	query param	news/news1.shtml	SQL injection via id parameter in news/news1.shtml	CWE-89
th	query param	faq/index.shtml	SQL injection via th parameter in faq/index.shtml	CWE-89

16 Jun 2026 23:05Current

8.9High risk

Vulners AI Score8.9

CVSS 27.5

EPSS0.03597

cve-2009-0646 sql injection 4site cms 2.6 nvd security vulnerability remote attack