Lucene search
K

4 matches found

ATTACKERKB
ATTACKERKB
added 2009/01/22 4:30 p.m.3 views

CVE-2009-0252

Multiple SQL injection vulnerabilities in default.asp in Enthrallweb eReservations allow remote attackers to execute arbitrary SQL commands via the 1 Login parameter aka username field or the 2 Password parameter aka password field. NOTE: some of these details are obtained from third party...

7.5CVSS6.3AI score0.01043EPSS
Exploits0References6
NVD
NVD
added 2009/01/22 4:30 p.m.38 views

CVE-2009-0252

Multiple SQL injection vulnerabilities in default.asp in Enthrallweb eReservations allow remote attackers to execute arbitrary SQL commands via the 1 Login parameter aka username field or the 2 Password parameter aka password field. NOTE: some of these details are obtained from third party...

7.5CVSS8.6AI score0.01043EPSS
Exploits0References5
Prion
Prion
added 2009/01/22 4:30 p.m.17 views

Sql injection

Multiple SQL injection vulnerabilities in default.asp in Enthrallweb eReservations allow remote attackers to execute arbitrary SQL commands via the 1 Login parameter aka username field or the 2 Password parameter aka password field. NOTE: some of these details are obtained from third party...

7.5CVSS9.4AI score0.01043EPSS
Exploits0References5
CVE
CVE
added 2009/01/22 4:0 p.m.47 views

CVE-2009-0252

The CVE-2009-0252 issue affects Enthrallweb eReservations (default.asp) where multiple SQL injection vulnerabilities exist. The underlying problem is unsafely handling the (1) Login parameter (username) and (2) Password parameter in the login form, enabling remote attackers to execute arbitrary S...

7.5CVSS8.9AI score0.01043EPSS
Exploits0References5Affected Software1
Rows per page
Query Builder