high7.5Public exploit code
CVE-2008-3420
Multiple SQL injection vulnerabilities in Mobius for Mimsy XG 1 1.4.4.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the id par…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Mobius 1.4.4.1 - SQL Injection2008-07-26 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in Mobius for Mimsy XG 1 1.4.4.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to browse.php or (2) the s parameter in an exhibitions action to detail.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Willo | Mobius Web Publishing Software | through 1.4.4.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/31247
- http://securityreason.com/securityalert/4097
- http://www.securityfocus.com/bid/30382
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44019
- https://www.exploit-db.com/exploits/6138
- http://secunia.com/advisories/31247
- http://securityreason.com/securityalert/4097
- http://www.securityfocus.com/bid/30382
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44019
- https://www.exploit-db.com/exploits/6138