CVE-2009-2034: Ricardo Alexandre De Oliveira Staudt Yogurt

Medium severity, CVSS 6.0. EPSS: 0.8% chance of exploitation in the next 30 days.

SQL injection vulnerability in writemessage.php in Yogurt 0.3, when register_globals is enabled, allows remote authenticated users to execute arbitrary SQL commands via the original parameter.

Affected products

Published 2009-06-12. Last modified 2026-06-16.