CVE-2009-2895: Phpsugar Ultimate Regnow Affiliate

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

SQL injection vulnerability in rss.php in Ultimate Regnow Affiliate (URA) 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter.

Affected products

• Phpsugar Ultimate Regnow Affiliate: version 3.0 only

Published 2009-08-20. Last modified 2026-06-16.