high7.5Public exploit code
CVE-2009-1024
Multiple SQL injection vulnerabilities in Beerwin PHPLinkAdmin 1.0 allow remote attackers to execute arbitrary SQL commands via the linkid parameter to edlink.…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Beerwin's PHPLinkAdmin 1.0 - Remote File Inclusion / SQL Injection2009-03-16 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in Beerwin PHPLinkAdmin 1.0 allow remote attackers to execute arbitrary SQL commands via the linkid parameter to edlink.php, and unspecified other vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Beerwin | Phplinkadmin | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/52778
- http://secunia.com/advisories/34323
- http://www.securityfocus.com/bid/34129
- http://www.vupen.com/english/advisories/2009/0733
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49265
- https://www.exploit-db.com/exploits/8216
- http://osvdb.org/52778
- http://secunia.com/advisories/34323
- http://www.securityfocus.com/bid/34129
- http://www.vupen.com/english/advisories/2009/0733
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49265
- https://www.exploit-db.com/exploits/8216