CVE-2009-3185

CVE-2009-3185 affects the Crazy Star plugin 2.0 for Discuz!. The vulnerability is an SQL injection in plugin.php, exploitable via the fmid parameter in a view action. The issue enables remote authenticated users to execute arbitrary SQL commands. The NVD metrics indicate a base score of 7.5 (HIGH...