medium6.8Public exploit code
CVE-2009-2164
Multiple SQL injection vulnerabilities in Kjtechforce mailman beta1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL command…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Kjtechforce mailman b1 - 'dest' Blind SQL Injection2009-06-05 · webapps · php · Verified
- Kjtechforce mailman b1 - Delete Row 'code' SQL Injection2009-06-05 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in Kjtechforce mailman beta1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via (1) the code parameter to activate.php or (2) the dest parameter to index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kjtechforce | Mailman | Version beta1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/504136/100/0/threaded
- https://www.exploit-db.com/exploits/8884
- https://www.exploit-db.com/exploits/8885
- http://www.securityfocus.com/archive/1/504136/100/0/threaded
- https://www.exploit-db.com/exploits/8884
- https://www.exploit-db.com/exploits/8885