high7.5Public exploit code
CVE-2006-6039
SQL injection vulnerability in matchdetail.php in Powie's PHP MatchMaker 4.05 and earlier allows remote attackers to execute arbitrary SQL commands via the edi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Powies MatchMaker 4.05 - 'matchdetail.php' SQL Injection2006-11-17 · webapps · php · Verified
Impact
SQL injection vulnerability in matchdetail.php in Powie's PHP MatchMaker 4.05 and earlier allows remote attackers to execute arbitrary SQL commands via the edit parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Powie | Php Matchmaker | through 4.06 Version 4.05 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/22966
- http://www.securityfocus.com/bid/21145
- http://www.vupen.com/english/advisories/2006/4611
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30360
- https://www.exploit-db.com/exploits/2798
- http://secunia.com/advisories/22966
- http://www.securityfocus.com/bid/21145
- http://www.vupen.com/english/advisories/2006/4611
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30360
- https://www.exploit-db.com/exploits/2798