CVE-2009-2113

CVE-2009-2113 describes multiple SQL injection vulnerabilities in FretsWeb 1.2, specifically affecting the 'name' parameter in player.php and the 'hash' parameter in song.php. This vulnerability carries a CVSS score of 7.5, indicating a high severity, as it allows unauthenticated remote attackers to execute arbitrary SQL commands with low attack complexity. The potential impact includes partial compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog or Hot List, an exploit for the 'name' parameter (EDB-8980) is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, Nuclei templates, or significant community discussion or media coverage.