CVE-2009-4865

no score yetEPSS 1.1%

Multiple SQL injection vulnerabilities in escorts_search.php in I-Escorts Directory Script and Agency Script, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) search_name and (2) languages parameters. NOTE: some of these details are obtained from third party information.

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2010-05-11
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

i-escorts:i-escorts_agency_script
i-escorts:i-escorts_directory_script

References

http://osvdb.org/56858
http://packetstormsecurity.org/0908-exploits/des-xss.txt
http://secunia.com/advisories/36161
https://exchange.xforce.ibmcloud.com/vulnerabilities/52304
http://osvdb.org/56858

Check your stack JSON