CVE-2011-0407

CVE-2011-0407 describes a SQL injection vulnerability in Phenotype CMS 3.0, specifically within the store function of the _phenotype/system/class/PhenoTypeDataObject.class.php file. This flaw allows unauthenticated remote attackers to execute arbitrary SQL commands by crafting a malicious URI. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog or showing active exploitation, public exploit code is available on ExploitDB, though there is minimal community discussion or media coverage surrounding this decade-old vulnerability.