high7.5Public exploit code
CVE-2009-4621
SQL injection vulnerability in the JiangHu Inn plugin 1.1 and earlier for Discuz!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Discuz! Plugin JiangHu 1.1 - 'id' SQL Injection2009-09-02 · webapps · php · Verified
Impact
SQL injection vulnerability in the JiangHu Inn plugin 1.1 and earlier for Discuz! allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action to forummission.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Patching | Jianghu Inn | through 1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.exploit-db.com/exploits/9576
- http://www.securityfocus.com/bid/36222
- http://www.vupen.com/english/advisories/2009/2525
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52984
- http://www.exploit-db.com/exploits/9576
- http://www.securityfocus.com/bid/36222
- http://www.vupen.com/english/advisories/2009/2525
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52984