CVE-2009-4933

no score yetEPSS 1.0%

winterwebs ezwebitor: no CVSS score yet. EPSS 1.0% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in login.php in EZ Webitor allow remote attackers to execute arbitrary SQL commands via the (1) txtUserId (Username) and (2) txtPassword (Password) parameters. NOTE: some of these details are obtained from third party information.

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2010-07-12
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

winterwebs:ezwebitor

References

http://secunia.com/advisories/34819
http://www.exploit-db.com/exploits/8487
http://www.securityfocus.com/bid/34604
https://exchange.xforce.ibmcloud.com/vulnerabilities/49966
http://secunia.com/advisories/34819

Check your stack JSON