CVE-2014-100020

EPSS 1.3%

SQL injection vulnerability in ChangeEmail.php in iTechClassifieds 3.03.057 allows remote attackers to execute arbitrary SQL commands via the PreviewNum parameter. NOTE: the CatID parameter is already covered by CVE-2008-0685.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/31140unverified exploitdbwww.exploit-db.com/exploits/31140unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/102457 https://exchange.xforce.ibmcloud.com/vulnerabilities/90683 http://www.exploit-db.com/exploits/31140 http://www.securityfocus.com/bid/65089