high7.5Public exploit code
CVE-2008-5650
SQL injection vulnerability in the login directory in AlstraSoft Web Host Directory allows remote attackers to execute arbitrary SQL commands via the pwd param…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Alstrasoft Web Host Directory 1.2 - Multiple Vulnerabilities2008-11-14 · webapps · php · Verified
- Alstrasoft Web Host Directory - Authentication Bypass2008-11-12 · webapps · php · Verified
Impact
SQL injection vulnerability in the login directory in AlstraSoft Web Host Directory allows remote attackers to execute arbitrary SQL commands via the pwd parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Alstrasoft | Webhost Directory | Version _nil_ |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/32660
- http://securityreason.com/securityalert/4771
- http://www.securityfocus.com/bid/32298
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46592
- https://www.exploit-db.com/exploits/7103
- http://secunia.com/advisories/32660
- http://securityreason.com/securityalert/4771
- http://www.securityfocus.com/bid/32298
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46592
- https://www.exploit-db.com/exploits/7103