CVE-2009-2776

Smart ASP Survey - SQL Injection

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in showresult.asp in Smart ASP Survey allows remote attackers to execute arbitrary SQL commands via the catid parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Moudi · textwebappsasp
https://www.exploit-db.com/exploits/34687

References (3)

Core 3
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/36028
Exploit vdb-entry x_refsource_osvdb
http://osvdb.org/56575

Scores

EPSS 0.0034
EPSS Percentile 56.6%

Details

CWE
CWE-89
Status published
Products (1)
sellatsite.com/smart_asp_survey
Published Aug 14, 2009
Tracked Since Feb 18, 2026