high7.5Public exploit code
CVE-2009-0293
SQL injection vulnerability in profile_view.php in Wazzum Dating Software, possibly 2.0, allows remote attackers to execute arbitrary SQL commands via the user…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Wazzum Dating Software - 'userid' SQL Injection2009-01-26 · webapps · php · Verified
Impact
SQL injection vulnerability in profile_view.php in Wazzum Dating Software, possibly 2.0, allows remote attackers to execute arbitrary SQL commands via the userid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wazzum | Wazzum Dating Software | Version _nil_ |