CVE-2009-0882

CVE-2009-0882 describes multiple SQL injection vulnerabilities in nForum version 1.5, specifically impacting the roman_bogorodskiy nforum product. Attackers can exploit these flaws remotely by manipulating the "id" parameter in showtheme.php and the "user" parameter in userinfo.php to execute arbitrary SQL commands. With a CVSS score of 7.5, this vulnerability is considered high severity, allowing for potential compromise of confidentiality, integrity, and availability with low attack complexity and no authentication required. While not listed in CISA's KEV catalog, exploit code is publicly available via ExploitDB (EDB-8170), though there is no evidence of active exploitation, Metasploit modules, Nuclei templates, or significant community discussion or media coverage.