CVE-2008-4161

EPSS 2.0%

SQL injection vulnerability in search_inv.php in Assetman 2.5b allows remote attackers to execute arbitrary SQL commands and conduct session fixation attacks via a combination of crafted order and order_by parameters in a search_all action.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/6490unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/31935 http://securityreason.com/securityalert/4287 https://exchange.xforce.ibmcloud.com/vulnerabilities/45233 https://www.exploit-db.com/exploits/6490 http://www.securityfocus.com/bid/31248