CVE-2009-4155

CVE-2009-4155 describes multiple SQL injection vulnerabilities within Eshopbuilde CMS, affecting various ASP pages and parameters. These flaws allow unauthenticated remote attackers to execute arbitrary SQL commands, potentially leading to data compromise, manipulation, or denial of service. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector and low attack complexity. While not listed on the KEV catalog or Hot List, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.