SQL Injection in Netartmedia Car Portal

CVE-2009-0395

SQL injection vulnerability in the login feature in NetArt Media Car Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.

Vulnerability class: SQL Injection

EPSS: 0.009 (57.7th percentile) — read the EPSS interpretation.

Affected products

Netartmedia Car_portal — versions 1.0
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)