CVE-2009-4925: Creasito E-Commerce Content Manager

Medium severity, CVSS 6.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Portale e-commerce Creasito (aka creasito e-commerce content manager) 1.3.16, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the username parameter to (1) admin/checkuser.php and (2) checkuser.php.

Affected products

• Creasito Creasito E-Commerce Content Manager: version 1.3.16 only

Published 2010-07-12. Last modified 2026-06-16.