Unscored severity · published Jan 27, 2009
CVE-2009-0281
SQL injection vulnerability in login.aspx in WarHound Walking Club allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters
–
CVSS
1.1%
EPSS
No
On KEV
Description
SQL injection vulnerability in login.aspx in WarHound Walking Club allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WC
Walking Club · Warhound
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0281
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0281
Exploit
http://www.securityfocus.com/bid/33317
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/48061
www.exploit-db.com
https://www.exploit-db.com/exploits/7802