high7.5Public exploit code
CVE-2009-2013
SQL injection vulnerability in bin/aps_browse_sources.php in Frontis 3.9.01.24 allows remote attackers to execute arbitrary SQL commands via the source_class p…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Frontis 3.9.01.24 - 'source_class' SQL Injection2009-06-08 · webapps · php · Verified
Impact
SQL injection vulnerability in bin/aps_browse_sources.php in Frontis 3.9.01.24 allows remote attackers to execute arbitrary SQL commands via the source_class parameter in a browse_classes action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Frontisgroup | Frontis | Version 3.9.01.24 |