Unrated severityNVD Advisory· Published May 7, 2009· Updated Apr 23, 2026

CVE-2009-1584

Description

Multiple SQL injection vulnerabilities in TemaTres 1.0.3 and 1.031, when magic_quotes_gpc is disabled, allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the (1) mail, (2) password, and (3) letra parameters to index.php; (4) y and (5) m parameters to sobre.php; and the (6) dcTema, (7) madsTema, (8) zthesTema, (9) skosTema, and (10) xtmTema parameters to xml.php.

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securityfocus.com/archive/1/503256nvdExploit
www.securityfocus.com/bid/34830nvdExploit
secunia.com/advisories/34983nvdVendor Advisory
osvdb.org/54245nvd
osvdb.org/54246nvd
www.securityfocus.com/archive/1/503252/100/0/threadednvd
www.exploit-db.com/exploits/8615nvd
www.exploit-db.com/exploits/8616nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000