CVE-2009-3713

CVE-2009-3713 describes an SQL injection vulnerability in MorcegoCMS, in fichero.php, affecting version 1.7.6 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands via the query string. The CVE entry is corroborated by multiple references (NVD, CVE List, PRION, ...