high7.5Public exploit code
CVE-2009-4735
SQL injection vulnerability in login.php in Allomani Audio & Video Library (Songs & Clips version) 2.7.0 allows remote attackers to execute arbitrary SQL comma…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Allomani Songs & Clips 2.7.0 - Blind SQL Injection2009-07-27 · webapps · php · Verified
Impact
SQL injection vulnerability in login.php in Allomani Audio & Video Library (Songs & Clips version) 2.7.0 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Allomani | Audio \& Video Library | Version 2.7.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.exploit-db.com/exploits/9274
- http://www.vupen.com/english/advisories/2009/2030
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52013
- http://www.exploit-db.com/exploits/9274
- http://www.vupen.com/english/advisories/2009/2030
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52013