CVEvulnerability
CVE-2009-0252
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-01-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in default.asp in Enthrallweb eReservations allow remote attackers to execute arbitrary SQL commands via the (1) Login parameter (aka username field) or the (2) Password parameter (aka password field). NOTE: some of these details are obtained from third party information.
Affected configurations
• enthrallweb ereservations
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/51456 osvdb.org
- http://secunia.com/advisories/33578 Vendor Advisory
- http://www.securityfocus.com/bid/33321 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48062 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7801 www.exploit-db.com
- http://osvdb.org/51456 osvdb.org
- http://secunia.com/advisories/33578 Vendor Advisory
- http://www.securityfocus.com/bid/33321 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48062 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7801 www.exploit-db.com