high7.5Public exploit code
CVE-2009-0964
UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows attackers to gain privileges.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHPRunner 4.2 - 'SearchOption' Blind SQL Injection2009-03-17 · webapps · php · Verified
Impact
UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows attackers to gain privileges. NOTE: this can be leveraged with a separate SQL injection vulnerability to obtain passwords remotely without authentication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xlinesoft | Phprunner | through 4.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/52804
- http://www.bugreport.ir/index_63.htm
- http://www.securityfocus.com/archive/1/501894/100/0/threaded
- http://www.vupen.com/english/advisories/2009/0750
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49279
- https://www.exploit-db.com/exploits/8226
- http://osvdb.org/52804
- http://www.bugreport.ir/index_63.htm
- http://www.securityfocus.com/archive/1/501894/100/0/threaded
- http://www.vupen.com/english/advisories/2009/0750
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49279
- https://www.exploit-db.com/exploits/8226