CVE-2009-2439

Multiple SQL injection vulnerabilities in Web Development House Alibaba Clone allow remote attackers to execute arbitrary SQL commands via the (1) IndustryID parameter to category.php and the (2) SellerID parameter to supplier/view_contact_details.php. NOTE: this is a product that was developed by a third party; it is not associated with alibaba.com or the Alibaba Group.

• CWE-89

• http://packetstormsecurity.org/0907-exploits/alibabaclone-sql.txtExploit
• http://secunia.com/advisories/35741Vendor Advisory
• http://www.vupen.com/english/advisories/2009/1838Vendor Advisory
• http://packetstormsecurity.org/0907-exploits/alibabaclone-sql.txtExploit
• http://secunia.com/advisories/35741Vendor Advisory
• http://www.vupen.com/english/advisories/2009/1838Vendor Advisory

Published

Jul 13, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2433Stack-based buffer overflow in the AddFavorite method in Mic…
• CVE-2009-2434Buffer overflow in the syscall implementation in IBM AIX 5.3…
• CVE-2009-2435The Sametime server in IBM Lotus Instant Messaging and Web C…
• CVE-2009-2436SQL injection vulnerability in page.php in Online Dating Sof…
• CVE-2009-2437Multiple cross-site scripting (XSS) vulnerabilities in index…
• CVE-2009-2438Cross-site scripting (XSS) vulnerability in index.php in the…
• CVE-2009-2440Cross-site scripting (XSS) vulnerability in index.php in JNM…
• CVE-2009-2441Cross-site scripting (XSS) vulnerability in ogp_show.php in …
• CVE-2009-2442Cross-site scripting (XSS) vulnerability in public/index.php…
• CVE-2009-2443Siteframe 3.2.3, and other 3.2.x versions, allows remote att…
• CVE-2009-2444Directory traversal vulnerability in maillinglist/setup/step…
• CVE-2009-2445Oracle iPlanet Web Server (formerly Sun Java System Web Serv…