CVE-2009-4985

Websitesrus Accessories ME Php Affiliate Script - SQL Injection

Title source: rule

Description

SQL injection vulnerability in browse.php in Accessories Me PHP Affiliate Script 1.4 allows remote attackers to execute arbitrary SQL commands via the Go parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Moudi · textwebappsphp

https://www.exploit-db.com/exploits/9370

View Code ZIP pw:eip

References (1)

Core 1

Core References

Exploit, Third Party Advisory exploit x_refsource_exploit-db

http://www.exploit-db.com/exploits/9370

Scores

EPSS 0.0063

EPSS Percentile 70.4%

Details

CWE

CWE-89

Status published

Products (1)

websitesrus/accessories_me_php_affiliate_script 1.4

Published Aug 25, 2010

Tracked Since Feb 18, 2026