high7.5Public exploit code
CVE-2009-5003
SQL injection vulnerability in click.php in e-soft24 Banner Exchange Script 1.0 allows remote attackers to execute arbitrary SQL commands via the targetid para…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Banner Exchange Script 1.0 - 'targetid' Blind SQL Injection2009-08-07 · webapps · php · Verified
Impact
SQL injection vulnerability in click.php in e-soft24 Banner Exchange Script 1.0 allows remote attackers to execute arbitrary SQL commands via the targetid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| E-Soft24 | Banner Exchange Script | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.org/0907-exploits/bes-sql.txt
- http://www.exploit-db.com/exploits/9387
- http://www.securityfocus.com/bid/43287
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52328
- http://packetstormsecurity.org/0907-exploits/bes-sql.txt
- http://www.exploit-db.com/exploits/9387
- http://www.securityfocus.com/bid/43287
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52328