45605vdb entry
http://osvdb.org/45605 CVE-2008-6572
AbleDating 2.4 - 'search_results.php?keyword' SQL Injection
Record summary
CVE-2008-6572 has a selected CVSS score of 6.8; EIP currently links 1 catalogued exploit.
Description
SQL injection vulnerability in search_results.php in ABK-Soft AbleDating 2.4 allows remote attackers to execute arbitrary SQL commands via the keyword parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBAbleDating 2.4 - 'search_results.php?keyword' SQL InjectionExploitDB exploitby Ali JasbiNot analyzed1 file
References
630366Third-party advisory
http://secunia.com/advisories/30366 20090522 abledating 2.4 >> Sql injection and cross site scripting on search_results.phpmailing list
http://www.securityfocus.com/archive/1/492478/100/0/threaded 29342vdb entry
http://www.securityfocus.com/bid/29342 abledating-searchresults-sql-injection(42597)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/42597 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2008-6572