high7.5Public exploit code
CVE-2009-2152
SQL injection vulnerability in a_index.php in AdaptWeb 0.9.2 allows remote attackers to execute arbitrary SQL commands via the CodigoDisciplina parameter in a …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- adaptweb 0.9.2 - Local File Inclusion / SQL Injection2009-06-15 · webapps · php · Verified
Impact
SQL injection vulnerability in a_index.php in AdaptWeb 0.9.2 allows remote attackers to execute arbitrary SQL commands via the CodigoDisciplina parameter in a TopicosCadastro1 action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Isabela Gasparini | Adaptweb | Version 0.9.2 |