Unrated severityNVD Advisory· Published Mar 12, 2009· Updated Apr 23, 2026
CVE-2009-0882
CVE-2009-0882
Description
Multiple SQL injection vulnerabilities in nForum 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to showtheme.php and the (2) user parameter to userinfo.php.
Affected products
1- cpe:2.3:a:roman_bogorodskiy:nforum:1.5:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.