CVE-2009-4203

CVE-2009-4203 describes multiple SQL injection vulnerabilities in Arab Portal 2.2, specifically within the admin/aclass/admin_func.php file. Attackers can exploit this by injecting arbitrary SQL commands via the X-Forwarded-For or Client-IP HTTP headers when accessing the default URI under the admin/ directory. This vulnerability carries a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an authentication bypass exploit (EDB-8828) exists, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.