CVE-2009-3175: Boldfx Model Agency Manager Pro

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Model Agency Manager PRO (formerly Modeling Agency Content Management Script) allow remote attackers to execute arbitrary SQL commands via the user_id parameter to (1) view.php, (2) photos.php, and (3) motm.php; and the (4) id parameter to forum_message.php.

Affected products

• Boldfx Model Agency Manager Pro: affected versions not specified

Published 2009-09-11. Last modified 2026-06-16.