CVE-2009-2337

EPSS 2.2%

SQL injection vulnerability in includes/module/book/index.inc.php in w3b|cms Gaestebuch Guestbook Module 3.0.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the spam_id parameter.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/8396unverified exploitdbwww.exploit-db.com/exploits/8396unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/53614 http://secunia.com/advisories/34650 https://exchange.xforce.ibmcloud.com/vulnerabilities/49853 http://www.exploit-db.com/exploits/8396 http://www.securityfocus.com/bid/34477 http://www.w3bcms.de/2.news/54.kommentare/