high7.5Public exploit code
CVE-2008-4074
SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrary SQL commands via the id parameter in a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Autodealers CMS AutOnline - 'id' SQL Injection2008-09-11 · webapps · php · Verified
- Autodealers CMS AutOnline - 'pageid' SQL Injection2008-09-11 · webapps · php · Verified
Impact
SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zanfi Solutions | Autodealers Cms Autonline | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/4247
- http://www.securityfocus.com/bid/31137
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45049
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45200
- https://www.exploit-db.com/exploits/6433
- http://securityreason.com/securityalert/4247
- http://www.securityfocus.com/bid/31137
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45049
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45200
- https://www.exploit-db.com/exploits/6433