CVE-2009-3343

CVE-2009-3343 : A SQL injection vulnerability in details.asp of HotWeb Rentals allows remote attackers to inject via the PropId parameter and execute arbitrary SQL commands. This is a remote, unsanitized-input issue; exploitation is mentioned in Exploit-DB (exploit ID 9675), but detailed exploit ...