CVE-2009-1787

CVE-2009-1787 describes multiple SQL injection vulnerabilities in PHP Dir Submit (also known as WebsiteSubmitter and Submitter Script). These flaws allow unauthenticated remote attackers to bypass login mechanisms and achieve administrative access by manipulating the username and password parameters. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog and showing no active exploitation or significant community discussion, public exploit code exists on ExploitDB, indicating its potential for abuse.