CVE-2009-3082

Snow Hall Silurus System 1.0 - SQL Injection via ID Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2009-3082.

AI-analyzed exploit summary This exploit demonstrates a remote SQL injection vulnerability in Silurus Classifieds System via the 'category.php' ID parameter. It includes functional SQLi payloads to extract user and admin credentials from the database.

Description

SQL injection vulnerability in wcategory.php in Snow Hall Silurus System 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Exploits (1)

exploitdb WORKING POC
webappsphp
https://www.exploit-db.com/exploits/9538

This exploit demonstrates a remote SQL injection vulnerability in Silurus Classifieds System via the 'category.php' ID parameter. It includes functional SQLi payloads to extract user and admin credentials from the database.

Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: Silurus Classifieds System
No auth needed
Prerequisites: Access to the vulnerable 'category.php' endpoint
devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (1)

Core 1
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/36124

Scores

EPSS 0.0089
EPSS Percentile 54.8%

Details

CWE
CWE-89
Status published
Products (1)
snowhall/silurus_system 1.0
Published Sep 04, 2009
Tracked Since Feb 18, 2026