35300Third-party advisory
http://secunia.com/advisories/35300 CVE-2009-2603
Escon SupportPortal Pro 3.0 - 'tid' Blind SQL Injection
Record summary
CVE-2009-2603 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
Multiple SQL injection vulnerabilities in index.php in Escon SupportPortal Pro 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) cat and (2) tid parameters.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBEscon SupportPortal Pro 3.0 - 'tid' Blind SQL InjectionExploitDB exploitby OzXNot analyzed1 file
References
48840exploit
http://www.exploit-db.com/exploits/8840 esconsupportportal-forum-sql-injectiom(50874)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/50874 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2009-2603