high7.5Public exploit code
CVE-2009-4798
Multiple SQL injection vulnerabilities in Diskos CMS 6.x allow remote attackers to execute arbitrary SQL commands via the (1) kat parameter to side.asp, and th…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Diskos CMS Manager - SQL Injection / File Disclosure / Authentication Bypass2009-03-30 · webapps · asp · Verified
Impact
Multiple SQL injection vulnerabilities in Diskos CMS 6.x allow remote attackers to execute arbitrary SQL commands via the (1) kat parameter to side.asp, and the (2) brugerid and (3) password fields to the administration login feature.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Diskos | Diskos Cms | Version 6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/34540
- http://www.exploit-db.com/exploits/8307
- http://www.securityfocus.com/bid/34289
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49509
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49510
- http://secunia.com/advisories/34540
- http://www.exploit-db.com/exploits/8307
- http://www.securityfocus.com/bid/34289
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49509
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49510