high7.5Public exploit code
CVE-2005-4207
SQL injection vulnerability in BTGrup Admin WebController Script allows remote attackers to execute SQL commands via the (1) Username and (2) Password fields.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BTGrup Admin WebController - SQL Injection2005-12-12 · webapps · php · Verified
Impact
SQL injection vulnerability in BTGrup Admin WebController Script allows remote attackers to execute SQL commands via the (1) Username and (2) Password fields.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Btgrup | Admin Webcontroller Script | All versions |
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/249
- http://www.osvdb.org/21815
- http://www.securityfocus.com/archive/1/419237/100/0/threaded
- http://www.securityfocus.com/bid/15819
- http://securityreason.com/securityalert/249
- http://www.osvdb.org/21815
- http://www.securityfocus.com/archive/1/419237/100/0/threaded
- http://www.securityfocus.com/bid/15819