high7.5Public exploit code
CVE-2008-2556
SQL injection vulnerability in read.php in PHP Visit Counter 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the datespan paramet…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP Visit Counter 0.4 - 'datespan' SQL Injection2008-05-31 · webapps · php · Verified
Impact
SQL injection vulnerability in read.php in PHP Visit Counter 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the datespan parameter in a read action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hessel Brouwer | Php Visit Counter | through 0.4 |