Escon · Escon Supportportal Pro · CVE-2009-2603
**Name of the Vulnerable Software and Affected Versions**
Escon SupportPortal Pro version 3.0
**Description**
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved through SQL injection vulnerabilities in the index.php file, specifically via the `cat` and `tid` parameters in the API endpoint "index.php".
**Recommendations**
For Escon SupportPortal Pro version 3.0, consider restricting access to the `cat` and `tid` parameters in the index.php file until a patch is available. As a temporary workaround, avoid using the `cat` and `tid` parameters in the affected API endpoint.