Vulnerability Details CVE-2009-5003
SQL injection vulnerability in click.php in e-soft24 Banner Exchange Script 1.0 allows remote attackers to execute arbitrary SQL commands via the targetid parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 56.9%
CVSS Severity
CVSS v2 Score 7.5
References
- http://packetstormsecurity.org/0907-exploits/bes-sql.txt
- http://www.exploit-db.com/exploits/9387
- http://www.securityfocus.com/bid/43287
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52328
- http://packetstormsecurity.org/0907-exploits/bes-sql.txt
- http://www.exploit-db.com/exploits/9387
- http://www.securityfocus.com/bid/43287
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52328
Products affected by CVE-2009-5003
-
cpe:2.3:a:e-soft24:banner_exchange_script:1.0