PT-2009-3325 · Aspthai.Net · Aspthai.Net Webboard

Daimon · Published 2009-02-23 · Updated 2017-09-29 · CVE-2009-0703

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ASPTHAI.Net Webboard version 6.0

Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. The issue is related to the id parameter in the "bview.asp" file.

Recommendations For ASPTHAI.Net Webboard version 6.0, avoid using the id parameter in the bview.asp file until a fix is available. Consider restricting access to the bview.asp file to minimize the risk of exploitation.

Exploit

Fix

RCE

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2009-0703

Affected Products

Aspthai.Net Webboard

References · 6

• 🔥 http://securityfocus.com/bid/33084 · Exploit
• 🔥 https://exploit-db.com/exploits/7635 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-0703 · Security Note
• http://secunia.com/advisories/34099 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0703 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47722 · Note