high7.5Public exploit code
CVE-2013-3524
SQL injection vulnerability in popupnewsitem/ in the Pop Up News module 2.0 and possibly earlier for phpVMS allows remote attackers to execute arbitrary SQL co…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- phpVms Virtual Airline Administration 2.1.934/2.1.935 - SQL Injection2013-04-15 · webapps · php · Verified
Impact
SQL injection vulnerability in popupnewsitem/ in the Pop Up News module 2.0 and possibly earlier for phpVMS allows remote attackers to execute arbitrary SQL commands via the itemid parameter. NOTE: this was originally reported as a problem in phpVMS.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Simpilotgroup | Pop Up News | Version 2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/53033
- http://www.exploit-db.com/exploits/24960
- http://www.osvdb.org/92328
- http://www.securityfocus.com/bid/59057
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83423
- https://github.com/DavidJClark/phpVMS-PopUpNews/commit/5cadf9cbf4d0872a879666ea594be356fad5897e
- https://github.com/DavidJClark/phpVMS-PopUpNews/commit/efaffa04ef87db1722d69ac7bfc07be71ce2dccf
- http://secunia.com/advisories/53033
- http://www.exploit-db.com/exploits/24960
- http://www.osvdb.org/92328
- http://www.securityfocus.com/bid/59057
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83423
- https://github.com/DavidJClark/phpVMS-PopUpNews/commit/5cadf9cbf4d0872a879666ea594be356fad5897e
- https://github.com/DavidJClark/phpVMS-PopUpNews/commit/efaffa04ef87db1722d69ac7bfc07be71ce2dccf