high7.5Public exploit code
CVE-2015-4658
Multiple SQL injection vulnerabilities in admin/login.php in Milw0rm Clone Script 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) usr …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Milw0rm Clone Script 1.0 - '/admin/login.php' Authentication Bypass2015-06-15 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in admin/login.php in Milw0rm Clone Script 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) usr or (2) pwd parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Milw0rm Project | Milw0rm Clone Script | Version 1.0 |