CVE-2009-2451: Multiple SQL injection vulnerabilities in index.php in MIM:InfiniX 1.2.003 and possibly earlier versions al...

Security readout for executives and security teams

CVE-2009-2451 describes SQL injection in MIM:InfiniX, a web application. A remote attacker may be able to tamper with database queries through calendar or search inputs. The sources do not provide a CVSS score or vendor fix, so urgency depends on whether this old software is still internet-facing. Exposure is likely limited to organizations still running MIM:InfiniX 1.2.003 or possibly earlier. Public-facing instances would carry the highest risk because the issue is remote and affects normal web inputs. Treat as high priority only if MIM:InfiniX is present, especially if public-facing. If the product is not deployed, no direct action is needed beyond documenting non-exposure. Mitigation focus: Inventory web assets for MIM:InfiniX, especially version 1.2.003 or earlier.; Check vendor or maintainer guidance; the provided sources do not name a fixed version.; Restrict public access to any remaining instance while remediation is assessed..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.