CVE-2008-6225

EPSS 1.2%

SQL injection vulnerability in info.php in Mole Group Airline Ticket Sale Script allows remote attackers to execute arbitrary SQL commands via the flight parameter. NOTE: the vendor has disputed this issue, stating "crazy hackers and so named Security companies [spread] out such false informations. Such scripts or versions [do not] exist.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/7009unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/49694 http://secunia.com/advisories/32577 https://exchange.xforce.ibmcloud.com/vulnerabilities/46383 https://www.exploit-db.com/exploits/7009 http://www.mole-group.com/content/view/57/72 http://www.securityfocus.com/bid/32138 http://www.vupen.com/english/advisories/2008/3027