high7.5Public exploit code
CVE-2008-6264
SQL injection vulnerability in admin/admin.php in E-topbiz Slide Popups 1.0 allows remote attackers to execute arbitrary SQL commands via the password paramete…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- e-topbiz Slide Popups 1 PHP - Authentication Bypass2009-12-30 · webapps · php · Verified
Impact
SQL injection vulnerability in admin/admin.php in E-topbiz Slide Popups 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| E-Topbiz | Slide Popups | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.org/0811-exploits/slidepopups-sql.txt
- http://www.securityfocus.com/bid/32171
- http://www.vupen.com/english/advisories/2008/3049
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46434
- https://www.exploit-db.com/exploits/7036
- http://packetstormsecurity.org/0811-exploits/slidepopups-sql.txt
- http://www.securityfocus.com/bid/32171
- http://www.vupen.com/english/advisories/2008/3049
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46434
- https://www.exploit-db.com/exploits/7036