high7.5Public exploit code
CVE-2009-4889
SQL injection vulnerability in books.php in the Book Panel (book_panel) module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP-Fusion Mod Book Panel - 'bookid' SQL Injection2009-03-09 · webapps · php · Verified
Impact
SQL injection vulnerability in books.php in the Book Panel (book_panel) module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the bookid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Basti2web | Book Panel | All versions |