CVE-2009-3665: Multiple SQL injection vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote attackers to execute...

Security readout for executives and security teams

Nullam Blog 0.1.2 has reported SQL injection flaws in index.php. A remote attacker could potentially manipulate database queries through the i parameter or v parameters in a register action. The bundle does not provide CVSS scoring, vendor patch details, or evidence of active exploitation. Exposure is likely limited to organizations still running Nullam Blog 0.1.2, especially if index.php registration functionality is internet-accessible. The bundle does not substantiate other affected products, versions, or CPEs. Treat as high priority only where Nullam Blog 0.1.2 is present and externally reachable. The business risk is database compromise, but scope is narrow and evidence of current exploitation is not provided. Mitigation focus: Inventory for Nullam Blog 0.1.2 instances and public index.php exposure.; Check original vendor or trusted advisory guidance for fixed versions or official mitigations.; Restrict or disable public registration functionality until remediation is confirmed..

Prepared

Jun 28, 2026, 18:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.