high7.5Public exploit code
CVE-2015-4137
SQL injection vulnerability in related.php in Milw0rm Clone Script 1.0 allows remote attackers to execute arbitrary SQL commands via the program parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Milw0rm Clone Script 1.0 - 'related.php?program' Blind SQL Injection2015-06-09 · webapps · php · Verified
Impact
SQL injection vulnerability in related.php in Milw0rm Clone Script 1.0 allows remote attackers to execute arbitrary SQL commands via the program parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Milw0rm Project | Milw0rm Clone Script | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/131981/Milw0rm-Clone-Script-1.0-SQL-Injection.html
- http://seclists.org/fulldisclosure/2015/May/76
- http://www.securityfocus.com/bid/74745
- https://www.exploit-db.com/exploits/37248/
- http://packetstormsecurity.com/files/131981/Milw0rm-Clone-Script-1.0-SQL-Injection.html
- http://seclists.org/fulldisclosure/2015/May/76
- http://www.securityfocus.com/bid/74745
- https://www.exploit-db.com/exploits/37248/