CVE-2009-2790

SoftBiz Dating Script - SQL Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2009-2790. PoCs published by MizoZ.

AI-analyzed exploit summary The provided text describes an SQL injection vulnerability in Softbiz Dating Script, where the 'cid' parameter in 'cat_products.php' is not properly sanitized. It lacks actual exploit code but references a known CVE and provides a basic example of the vulnerable endpoint.

Description

SQL injection vulnerability in cat_products.php in SoftBiz Dating Script allows remote attackers to execute arbitrary SQL commands via the cid parameter. NOTE: this might overlap CVE-2006-3271.4.

Exploits (1)

exploitdb WRITEUP VERIFIED
by MizoZ · textwebappsphp
https://www.exploit-db.com/exploits/33132

The provided text describes an SQL injection vulnerability in Softbiz Dating Script, where the 'cid' parameter in 'cat_products.php' is not properly sanitized. It lacks actual exploit code but references a known CVE and provides a basic example of the vulnerable endpoint.

Classification
Writeup 80%
Attack Type
Sqli
Complexity
Trivial
Reliability
Theoretical
Target: Softbiz Dating Script
No auth needed
Prerequisites: Access to the vulnerable endpoint
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/52158
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/35896

Scores

EPSS 0.0098
EPSS Percentile 57.7%

Details

CWE
CWE-89
Status published
Products (2)
softbiz/dating_script
softbizscripts/dating_script 1.0
Published Aug 17, 2009
Tracked Since Feb 18, 2026