cve/2013/CVE-2013-2690.md

CVE-2013-2690

Description

SQL injection vulnerability in index.php in Synchroweb Technology SynConnect 2.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter in a logoff action.

POC

Reference

• http://packetstormsecurity.com/files/120958/SynConnect-SQL-Injection.html
• http://www.exploit-db.com/exploits/24898

Github

No PoCs found on GitHub currently.