high7.5Public exploit code
CVE-2008-2753
Multiple SQL injection vulnerabilities in Pooya Site Builder (PSB) 6.0 allow remote attackers to execute arbitrary SQL commands via the (1) xslIdn parameter to…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Pooya Site Builder (PSB) 6.0 - Multiple SQL Injections2008-06-11 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in Pooya Site Builder (PSB) 6.0 allow remote attackers to execute arbitrary SQL commands via the (1) xslIdn parameter to (a) utils/getXsl.aspx, and the (2) part parameter to (b) getXml.aspx and (c) getXls.aspx in utils/.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Paridel | Pooya Site Builder | Version 6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://bugreport.ir/index.php?/42
- http://seclists.org/bugtraq/2008/Jun/0115.html
- http://secunia.com/advisories/30610
- http://www.securityfocus.com/bid/29673
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43007
- https://www.exploit-db.com/exploits/5788
- http://bugreport.ir/index.php?/42
- http://seclists.org/bugtraq/2008/Jun/0115.html
- http://secunia.com/advisories/30610
- http://www.securityfocus.com/bid/29673
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43007
- https://www.exploit-db.com/exploits/5788