CVE-2009-4798

Diskos CMS Manager - SQL Injection / File Disclosure / Authentication Bypass

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2009-4798 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.

Description

Multiple SQL injection vulnerabilities in Diskos CMS 6.x allow remote attackers to execute arbitrary SQL commands via the (1) kat parameter to side.asp, and the (2) brugerid and (3) password fields to the administration login feature.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBDiskos CMS Manager - SQL Injection / File Disclosure / Authentication BypassExploitDB exploitby AnGeL25dZNot analyzed1 file

linked to 2 vulnerabilities

ExploitDB
PoC details

References

6