CVE-2009-3753

CVE-2009-3753 is an unrestricted file upload vulnerability in Opial 1.0. An attacker could upload a file with an executable extension as a User Image and access it via a request to the file in userimages (related to register.php) to execute arbitrary code. The NVD entry scores it 7.5/10 (HIGH) wi...

CVE-2009-3752

Opial 1.0 is affected by a SQL injection in home.php through the genres_parent parameter. This allows remote attackers to execute arbitrary SQL commands. The vulnerability has a CVSS v2 base score of 7.5 (HIGH) with network attack vector, low attack complexity, no authentication, and partial impa...

CVE-2009-2340

CVE-2009-2340 affects Opial 1.0: the admin/index.php module is vulnerable to SQL injection via the txtUserName (User Name) parameter, enabling remote execution of arbitrary SQL commands. Some sources also mention txtPassword and other parameters, but the core detail is the improper input filterin...

CVE-2009-3751

CVE-2009-3751 describes a cross-site scripting (XSS) vulnerability in Opial 1.0, specifically in home.php where the genres_parent parameter can be exploited to inject arbitrary web script or HTML. The issue is triggered remotely, enabling script execution in the context of affected users. The pro...