high7.5Public exploit code
CVE-2008-3953
SQL injection vulnerability in keyword_search_action.php in Vastal I-Tech Shaadi Zone 1.0.9 allows remote attackers to execute arbitrary SQL commands via the t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Vastal I-Tech Shaadi Zone 1.0.9 - 'tage' SQL Injection2008-09-05 · webapps · php · Verified
Impact
SQL injection vulnerability in keyword_search_action.php in Vastal I-Tech Shaadi Zone 1.0.9 allows remote attackers to execute arbitrary SQL commands via the tage parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vastal | Shaadi Zone | Version 1.0.9 |
Weakness classification
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/4232
- http://www.securityfocus.com/bid/31039
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44947
- https://www.exploit-db.com/exploits/6385
- http://securityreason.com/securityalert/4232
- http://www.securityfocus.com/bid/31039
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44947
- https://www.exploit-db.com/exploits/6385