CVE-2009-3313: Fmyclone

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in FMyClone 2.3 allow remote attackers to execute arbitrary SQL commands via the comp parameter to (1) index.php and (2) editComments.php, and (3) allow remote authenticated administrators to execute arbitrary SQL commands via the id parameter in a comment action to edit.php.

Affected products

• Fmyclone Fmyclone: version 2.3 only

Published 2009-09-23. Last modified 2026-06-16.