SQL Injection Vulnerability in eLitius by eLitius
CVE-2009-1506

Currently unrated

Key Information:

Vendor

Intelliants

Status
Elitius
Vendor
CVE Published:
1 May 2009

What is CVE-2009-1506?

An SQL injection vulnerability exists in eLitius 1.0 that allows remote attackers to inject arbitrary SQL commands through the 'id' parameter in the banner-details.php file. This weakness can lead to unauthorized access to sensitive database information, potentially compromising the integrity and security of the application. It is crucial for users of eLitius to implement security measures and updates to protect against this type of exploit.

References

https://www.exploit-db.com/exploits/8563
exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/34769
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.