← back
CVE-2015-2843

CVE-2015-2843

EPSS 38.1%
Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute arbitrary SQL commands via the (1) user_name or (2) user_pass parameter in go_login.php or the PATH_INFO to (3) go_login/validate_credentials/admin/ or (4) index.php/go_site/go_get_user_info/.
Affected products
n/a · n/a
public PoCs found — 5
cve_referencepacketstormsecurity.com/files/131543/GoAutoDial-SQL-Injection-Command-Execution-File-Upload.htmlunverifiedcve_referencewww.exploit-db.com/exploits/36807/unverifiedcve_referencewww.exploit-db.com/exploits/42296/unverifiedexploitdbwww.exploit-db.com/exploits/36807unverifiedexploitdbwww.exploit-db.com/exploits/42296unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://goautodial.org/news/21http://packetstormsecurity.com/files/131543/GoAutoDial-SQL-Injection-Command-Execution-File-Upload.htmlhttps://www.exploit-db.com/exploits/36807/https://www.exploit-db.com/exploits/42296/http://www.securityfocus.com/archive/1/535319/100/1100/threadedhttp://www.securityfocus.com/bid/74281