CVE-2009-3712

CVE-2009-3712 describes multiple SQL injection vulnerabilities within Ebay Clone 2009, specifically affecting the ebayclonescript product. Attackers can exploit these flaws by injecting malicious SQL commands into the user_id parameter of feedback.php and the item_id parameter of view_full_size.php, classifide_ad.php, and crosspromoteitems.php. This vulnerability carries a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While not currently on the KEV catalog or Hot List, public exploit code is available via ExploitDB, though there is no evidence of active exploitation, Metasploit modules, Nuclei templates, or significant community discussion.