CVE-2009-5003

ALTO 7.5CVE-2009-5003 · Published 22/09/2010 · updated 16/06/2026

In breve

CVE-2009-5003 è una vulnerabilità ALTO (CVSS 7.5) che riguarda banner exchange script (e-soft24).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.99%, superiore al 62.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
banner exchange script e-soft24	`= 1.0`	No fix yet

Description

SQL injection vulnerability in click.php in e-soft24 Banner Exchange Script 1.0 allows remote attackers to execute arbitrary SQL commands via the targetid parameter.

References

packetstormsecurity.org/0907-exploits/bes-sql.txt · Exploit
exploit-db.com/exploits/9387 · Exploit
securityfocus.com/bid/43287 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/52328

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free