CVE-2009-3358

Tourismscripts Adult Portal Escort Listing - SQL Injection

Title source: rule

Description

SQL injection vulnerability in profile.php in Tourism Scripts Adult Portal escort listing allows remote attackers to execute arbitrary SQL commands via the user_id parameter.

Exploits (2)

exploitdb WORKING POC VERIFIED
by Mr.SQL · textwebappsphp
https://www.exploit-db.com/exploits/9634
exploitdb WORKING POC
webappsphp
https://www.exploit-db.com/exploits/8788

Scores

EPSS 0.0029
EPSS Percentile 52.6%

Details

CWE
CWE-89
Status published
Products (1)
tourismscripts/adult_portal_escort_listing
Published Sep 24, 2009
Tracked Since Feb 18, 2026