NetSight
high7.5Public exploit code

CVE-2009-2339

SQL injection vulnerability in index.php in Rentventory allows remote attackers to execute arbitrary SQL commands via the product parameter.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

SQL injection vulnerability in index.php in Rentventory allows remote attackers to execute arbitrary SQL commands via the product parameter.

Affected products

VendorProductAffected versions
RentventoryRentventory
All versions

Weakness classification

References