CVE-2009-3209: Raizlabs PHP Email Manager

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in remove.php in PHP eMail Manager 3.3.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter.

Affected products

• Raizlabs PHP Email Manager: version 3.3.0 only

Published 2009-09-16. Last modified 2026-06-16.