medium6.8Public exploit code
CVE-2009-2154
SQL injection vulnerability in admin/login.php in Impleo Music Collection 2.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- impleo music Collection 2.0 - SQL Injection / Cross-Site Scripting2009-06-15 · webapps · php · Verified
Impact
SQL injection vulnerability in admin/login.php in Impleo Music Collection 2.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sappy.Dk | Impleo Music Collection | Version 2.0 |