CVE-2009-3343

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

SQL injection vulnerability in details.asp in HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via the PropId parameter.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Sep 24, 2009
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2009

CVE-2009-33445.0Unspecified vulnerability in SAP Crystal Reports Server 2008 on Windows XP allows attackers to cause a denial of service (infinite loop) viaCVE-2009-334510.0Heap-based buffer overflow in SAP Crystal Reports Server 2008 has unknown impact and attack vectors, as demonstrated by a certain module in CVE-2009-334610.0Unspecified vulnerability in SAP Crystal Reports Server 2008 allows remote attackers to execute arbitrary code via unknown vectors, as demonCVE-2009-334710.0Buffer overflow on the D-Link DIR-400 wireless router allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrCVE-2009-33484.3Cross-site scripting (XSS) vulnerability in Datavore Gyro 5.0 allows remote attackers to inject arbitrary web script or HTML via the cid parCVE-2009-33497.5SQL injection vulnerability in Datavore Gyro 5.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter in a cat acCVE-2009-335010.0Multiple unspecified vulnerabilities in the Subdomain Manager module for Drupal have unknown impact and attack vectors.CVE-2009-335110.0Multiple unspecified vulnerabilities in the Node Browser module for Drupal have unknown impact and attack vectors.CVE-2009-335210.0Multiple unspecified vulnerabilities in the quota_by_role (Quota by role) module for Drupal have unknown impact and attack vectors.CVE-2009-335310.0Multiple unspecified vulnerabilities in the Node2Node module for Drupal have unknown impact and attack vectors.CVE-2009-335410.0Multiple unspecified vulnerabilities in the Rest API module for Drupal have unknown impact and attack vectors.CVE-2009-33554.3Cross-site scripting (XSS) vulnerability in profile.php in Datetopia Buy Dating Site 1.0 allows remote attackers to inject arbitrary web scr
CVE-2009-3343: High severity, CVSS 7.5 | Vulnix