Unrated severityNVD Advisory· Published Nov 17, 2009· Updated Apr 23, 2026
CVE-2009-3961
CVE-2009-3961
Description
SQL injection vulnerability in user.php in Super Serious Stats (aka superseriousstats) before 1.1.2p1 allows remote attackers to execute arbitrary SQL commands via the uid parameter, related to an "incorrect regexp." NOTE: some of these details are obtained from third party information.
Affected products
7cpe:2.3:a:jos_de_ruijter:superseriousstats:*:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:jos_de_ruijter:superseriousstats:*:*:*:*:*:*:*:*range: <=1.1.2
- cpe:2.3:a:jos_de_ruijter:superseriousstats:1.0.13:*:*:*:*:*:*:*
- cpe:2.3:a:jos_de_ruijter:superseriousstats:1.0.14:*:*:*:*:*:*:*
- cpe:2.3:a:jos_de_ruijter:superseriousstats:1.0.15:*:*:*:*:*:*:*
- cpe:2.3:a:jos_de_ruijter:superseriousstats:1.0.16:*:*:*:*:*:*:*
- cpe:2.3:a:jos_de_ruijter:superseriousstats:1.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:jos_de_ruijter:superseriousstats:1.1.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- code.google.com/p/superseriousstats/nvdPatch
- www.vupen.com/english/advisories/2009/3175nvdVendor Advisory
- secunia.com/advisories/37316nvd
News mentions
0No linked articles in our index yet.