TI-2009-03030 CVE-2009-3185 · GHSA-g6x6-w452-43rxSQL injection vulnerability in plugin.php in the Crazy Star plugin 2.0 for Discuz! allows…Priority LOW 35SQL injection vulnerability in plugin.php in the Crazy Star plugin 2.0 for Discuz! allows remote authenticated users to execute arbitrary SQL commands via the fmid parameter in a view action.CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0097 · Published 2009-09-15 · No fix listed CWE-89