CVE-2009-0516

Description

SQL injection vulnerability in the classified page (classified.php) in BusinessSpace 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.

References

https://www.exploit-db.com/exploits/8011

https://exchange.xforce.ibmcloud.com/vulnerabilities/48606

http://www.securityfocus.com/archive/1/500787/100/0/threaded

http://secunia.com/advisories/33875

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS