Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 20/08/2009 Updated: 17/08/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Subscribe to Clone2009

Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote malicious users to execute arbitrary SQL commands via the (1) id parameter to product_desc.php, and the cid parameter to (2) showcategory.php and (3) gallery.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
clone2009 ebay clone 2009

/* Name : Ebay Clone from (clone2009com<clone2009com>) Site : wwwclone2009com/ Author : Hamza 'MizoZ' N Email : mizozx[at]gmail[dot]com Greetz : Zuka , GreyMen :) */ # 1st SQL injection : File : gotourlphp , Get : id [HOST]/[PATH]/gotourlphp?id=-1+union+select+version()-- => You will be redirected to [HOST]/[PA ...

CWE-89 http://osvdb.org/56266 http://osvdb.org/56265 http://packetstormsecurity.org/0907-exploits/clone2009-sql.txt http://osvdb.org/56268 http://secunia.com/advisories/35952 https://exchange.xforce.ibmcloud.com/vulnerabilities/51956 https://nvd.nist.gov https://www.exploit-db.com/exploits/11164/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2009-2894

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect