CVE-2009-0252

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-01-22 · updated 2026-06-16
Weakness: CWE-89

Description

Multiple SQL injection vulnerabilities in default.asp in Enthrallweb eReservations allow remote attackers to execute arbitrary SQL commands via the (1) Login parameter (aka username field) or the (2) Password parameter (aka password field). NOTE: some of these details are obtained from third party information.

Affected products

Enthrallweb Ereservations: all versions

References

http://osvdb.org/51456
http://secunia.com/advisories/33578
http://www.securityfocus.com/bid/33321
https://exchange.xforce.ibmcloud.com/vulnerabilities/48062
https://www.exploit-db.com/exploits/7801
http://osvdb.org/51456
http://secunia.com/advisories/33578
http://www.securityfocus.com/bid/33321
https://exchange.xforce.ibmcloud.com/vulnerabilities/48062
https://www.exploit-db.com/exploits/7801

Get alerted when CVE-2009-0252 or the next vulnerability affects your stack