CVE-2009-3185: Comsenz Crazy Star Plugin

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in plugin.php in the Crazy Star plugin 2.0 for Discuz! allows remote authenticated users to execute arbitrary SQL commands via the fmid parameter in a view action.

Affected products

• Comsenz Crazy Star Plugin: version 2.0 only

Published 2009-09-15. Last modified 2026-06-16.