cpe:/a:wiccle:iwiccle:1.01 CVE-2009-3217 2009-09-16T15:30:00.467-04:00 2017-09-18T21:29:30.420-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2009-09-17T07:57:00.000-04:00 EXPLOIT-DB 9266 SQL injection vulnerability in the admin module in iWiccle 1.01 allows remote attackers to execute arbitrary SQL commands via the member_id parameter in an edit_user action to index.php.