CVE-2017-15976

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• ZeeBuddy 2x - 'groupid' SQL Injection2017-10-30 · webapps · php

Impact

ZeeBuddy 2x allows SQL Injection via the admin/editadgroup.php groupid parameter, a different vulnerability than CVE-2008-3604.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://packetstormsecurity.com/files/144446/ZeeBuddy-2x-SQL-Injection.html
• https://www.exploit-db.com/exploits/43083/
• https://packetstormsecurity.com/files/144446/ZeeBuddy-2x-SQL-Injection.html
• https://www.exploit-db.com/exploits/43083/