high7.5Public exploit code
CVE-2012-0906
SQL injection vulnerability in the Moviebase addon for deV!L'z Clanportal (DZCP) 1.5.5 allows remote attackers to execute arbitrary SQL commands via the id par…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- DZCP (deV!L_z Clanportal) 1.5.5 Moviebase Addon - Blind SQL Injection2012-01-18 · webapps · php · Verified
Impact
SQL injection vulnerability in the Moviebase addon for deV!L'z Clanportal (DZCP) 1.5.5 allows remote attackers to execute arbitrary SQL commands via the id parameter in a showkat action to index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mystarmedia | Moviebase Addon | All versions |