CVE-2009-5003

CVE-2009-5003 is an SQL injection in the e-soft24 Banner Exchange Script 1.0. The vulnerability is in click.php, exploitable via the targetid parameter to allow remote execution of arbitrary SQL commands. Multiple sources (NVD, CVE lists, PRION) corroborate this description. The reports do not pr...