high7.5Public exploit code
CVE-2009-2894
Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to product_desc.php…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ebay Clone from clone2009 - SQL Injection2010-01-16 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to product_desc.php, and the cid parameter to (2) showcategory.php and (3) gallery.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Clone2009 | Ebay Clone | Version 2009 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/56265
- http://osvdb.org/56266
- http://osvdb.org/56268
- http://packetstormsecurity.org/0907-exploits/clone2009-sql.txt
- http://secunia.com/advisories/35952
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51956
- http://osvdb.org/56265
- http://osvdb.org/56266
- http://osvdb.org/56268
- http://packetstormsecurity.org/0907-exploits/clone2009-sql.txt
- http://secunia.com/advisories/35952
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51956