CVE-2009-2926: Phpcompet.free PHP Competition System

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in PHP Competition System BETA 0.84 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) day parameter to show_matchs.php and (2) pageno parameter to persons.php.

Affected products

• Phpcompet.free PHP Competition System: version 0.84 only

Published 2009-08-21. Last modified 2026-06-16.