high7.5Public exploit code
CVE-2009-3150
SQL injection vulnerability in index.php in Multi Website 1.5 allows remote attackers to execute arbitrary SQL commands via the Browse parameter in a vote acti…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Multi Website 1.5 - index PHP action SQL Injection2009-08-03 · webapps · php · Verified
Impact
SQL injection vulnerability in index.php in Multi Website 1.5 allows remote attackers to execute arbitrary SQL commands via the Browse parameter in a vote action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Multi-Website | Multi Website | Version 1.5 |