CVE-2009-2308
CVE-2009-2308
Multiple SQL injection vulnerabilities in affiliates.php in the Affiliation (aka Affiliates) module 1.1.0 and earlier for PunBB allow remote attackers to execute arbitrary SQL commands via the (1) in or (2) out parameter.
Productos afectados
n/a · n/aPoCs públicas encontradas — 4
cve_referencepacketstormsecurity.org/0906-exploits/punbbaffiliations-blindsql.txtno verificadocve_referencepacketstormsecurity.org/0906-exploits/punbbaffiliationsin-blindsql.txtno verificadocve_referencewww.exploit-db.com/exploits/9055no verificadoexploitdbwww.exploit-db.com/exploits/9055no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →Referencias
http://packetstormsecurity.org/0906-exploits/punbbaffiliations-blindsql.txthttp://packetstormsecurity.org/0906-exploits/punbbaffiliationsin-blindsql.txthttp://secunia.com/advisories/35654https://exchange.xforce.ibmcloud.com/vulnerabilities/51437http://www.exploit-db.com/exploits/9055http://www.osvdb.org/55478