Unrated severityNVD Advisory· Published May 7, 2009· Updated Jun 16, 2026

CVE-2009-1584

Description

Multiple SQL injection vulnerabilities in TemaTres 1.0.3 and 1.031, when magic_quotes_gpc is disabled, allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the (1) mail, (2) password, and (3) letra parameters to index.php; (4) y and (5) m parameters to sobre.php; and the (6) dcTema, (7) madsTema, (8) zthesTema, (9) skosTema, and (10) xtmTema parameters to xml.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Tematres/Tematresinferred
Range: <=1.031

Patches

Vulnerability mechanics

References

www.securityfocus.com/archive/1/503256nvdExploit
www.securityfocus.com/bid/34830nvdExploit
secunia.com/advisories/34983nvdVendor Advisory
osvdb.org/54245nvd
osvdb.org/54246nvd
www.securityfocus.com/archive/1/503252/100/0/threadednvd
www.exploit-db.com/exploits/8615nvd
www.exploit-db.com/exploits/8616nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000