high7.5Public exploit code
CVE-2009-2915
SQL injection vulnerability in 2fly_gift.php in 2FLY Gift Delivery System 6.0 allows remote attackers to execute arbitrary SQL commands via the gameid paramete…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Discuz! 6.0 - '2fly_gift.php' SQL Injection2009-08-15 · webapps · php · Verified
Impact
SQL injection vulnerability in 2fly_gift.php in 2FLY Gift Delivery System 6.0 allows remote attackers to execute arbitrary SQL commands via the gameid parameter in a content action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 2fly | Gift Delivery System | Version 6.0 |