critical9.8Public exploit code
CVE-2019-9083
SQLiteManager 1.20 and 1.24 allows SQL injection via the /sqlitemanager/main.php dbsel parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SQLiteManager 1.2.0 / 1.2.4 - Blind SQL Injection2019-08-28 · webapps · php
Impact
SQLiteManager 1.20 and 1.24 allows SQL injection via the /sqlitemanager/main.php dbsel parameter. NOTE: This product is discontinued.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sqlitemanager | Sqlitemanager | Versions 1.20, 1.24 |