cve/2008/CVE-2008-0737.md
2024-06-18 02:51:15 +02:00

717 B

CVE-2008-0737

Description

SQL injection vulnerability in admin/utilities_ConfigHelp.asp in CandyPress (CP) 4.1.1.26, and other 4.x and 3.x versions, allows remote attackers to execute arbitrary SQL commands via the helpfield parameter.

POC

Reference

Github

No PoCs found on GitHub currently.