SQL Injection Vulnerability in eLitius by eLitius
CVE-2009-1506

Currently unrated

Key Information:

Vendor: Intelliants
Status: Elitius
Vendor: CVE Published:; 1 May 2009

🔔 Create Intelliants Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2009-1506?

An SQL injection vulnerability exists in eLitius 1.0 that allows remote attackers to inject arbitrary SQL commands through the 'id' parameter in the banner-details.php file. This weakness can lead to unauthorized access to sensitive database information, potentially compromising the integrity and security of the application. It is crucial for users of eLitius to implement security measures and updates to protect against this type of exploit.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2009-1506 - Proof of Concept

References

https://www.exploit-db.com/exploits/8563

exploitx_refsource_EXPLOIT-DB

http://www.securityfocus.com/bid/34769

vdb-entryx_refsource_BID

Download the Critical Vulnerability Management Cheat Sheet

Timeline

🟡
Public PoC available
May 1, 2009
👾
Exploit known to exist
May 1, 2009
Vulnerability published
May 1, 2009
Vulnerability Reserved
May 1, 2009

CVE-2009-1506 Data

JSON