CVE-2009-4203

EPSS 2.0%

Multiple SQL injection vulnerabilities in admin/aclass/admin_func.php in Arab Portal 2.2 allow remote attackers to execute arbitrary SQL commands via the (1) X-Forwarded-For or (2) Client-IP HTTP header in a request to the default URI under admin/.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/8828unverified exploitdbwww.exploit-db.com/exploits/8828unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/54811 http://secunia.com/advisories/35257 https://exchange.xforce.ibmcloud.com/vulnerabilities/50859 http://www.exploit-db.com/exploits/8828 http://www.securityfocus.com/bid/35149