high7.5Public exploit code
CVE-2008-5950
SQL injection vulnerability in media/media_level.asp in ASP Template Creature allows remote attackers to execute arbitrary SQL commands via the mcatid paramete…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- template creature - SQL Injection / File Disclosure2008-12-04 · webapps · php · Verified
Impact
SQL injection vulnerability in media/media_level.asp in ASP Template Creature allows remote attackers to execute arbitrary SQL commands via the mcatid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aspapps | Template Creature | Version _nil_ |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/32992
- http://www.securityfocus.com/bid/32641
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47084
- https://www.exploit-db.com/exploits/7339
- http://secunia.com/advisories/32992
- http://www.securityfocus.com/bid/32641
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47084
- https://www.exploit-db.com/exploits/7339