high7.5Public exploit code
CVE-2009-2926
Multiple SQL injection vulnerabilities in PHP Competition System BETA 0.84 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) day…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP Competition System 0.84 - 'competition' SQL Injection2009-08-14 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in PHP Competition System BETA 0.84 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) day parameter to show_matchs.php and (2) pageno parameter to persons.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpcompet.Free | Php Competition System | Version 0.84 |