high7.5Public exploit code
CVE-2009-1764
SQL injection vulnerability in inc/ajax.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a digg action.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MaxCMS 2.0 - '/inc/ajax.asp' SQL Injection2009-05-18 · webapps · asp · Verified
Impact
SQL injection vulnerability in inc/ajax.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a digg action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bokecc | Maxcms | Version 2.0 |