SQL Injection Vulnerability in NetArt Media Car Portal by NetArt Media
CVE-2009-0395

Currently unrated

Key Information:

Vendor: Netartmedia
Status: Car Portal
Vendor: CVE Published:; 3 February 2009

🔔 Create Netartmedia Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2009-0395?

The NetArt Media Car Portal 1.0 contains a SQL injection vulnerability in its login feature. By manipulating the username and password parameters, remote attackers can execute arbitrary SQL commands. This exposure allows unauthorized users to interact with the database, potentially compromising sensitive information. Websites using this version should prioritize mitigating this risk through secure coding practices and implementing input validation.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2009-0395 - Proof of Concept

References

http://www.securityfocus.com/bid/33521

vdb-entryx_refsource_BID

https://www.exploit-db.com/exploits/7916

exploitx_refsource_EXPLOIT-DB

Download the Critical Vulnerability Management Cheat Sheet

Timeline

🟡
Public PoC available
Feb 3, 2009
👾
Exploit known to exist
Feb 3, 2009
Vulnerability published
Feb 3, 2009
Vulnerability Reserved
Feb 2, 2009

CVE-2009-0395 Data

JSON