CVE-2008-2753

EPSS 1.2%

Multiple SQL injection vulnerabilities in Pooya Site Builder (PSB) 6.0 allow remote attackers to execute arbitrary SQL commands via the (1) xslIdn parameter to (a) utils/getXsl.aspx, and the (2) part parameter to (b) getXml.aspx and (c) getXls.aspx in utils/.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/5788unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://bugreport.ir/index.php?/42 http://seclists.org/bugtraq/2008/Jun/0115.html http://secunia.com/advisories/30610 https://exchange.xforce.ibmcloud.com/vulnerabilities/43007 https://www.exploit-db.com/exploits/5788 http://www.securityfocus.com/bid/29673