high7.5Public exploit code
CVE-2009-3252
Multiple SQL injection vulnerabilities in news.php in Rock Band CMS 0.10 allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) id p…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Rock Band CMS 0.10 - 'news.php' Multiple SQL Injections (2)2010-08-12 · webapps · php · Verified
- Rock Band CMS 0.10 - 'news.php' Multiple SQL Injections (1)2009-08-31 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in news.php in Rock Band CMS 0.10 allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) id parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dave Robinson | Rockbandcms | Version 0.10 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/36517
- http://www.exploit-db.com/exploits/9553
- http://www.vupen.com/english/advisories/2009/2494
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52940
- http://secunia.com/advisories/36517
- http://www.exploit-db.com/exploits/9553
- http://www.vupen.com/english/advisories/2009/2494
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52940