cve/2009/CVE-2009-2888.md

CVE-2009-2888

Description

SQL injection vulnerability in index.php in PHP Scripts Now Hangman allows remote attackers to execute arbitrary SQL commands via the n parameter.

POC

Reference

• http://packetstormsecurity.org/0907-exploits/tophangman-sqlxss.txt
• http://packetstormsecurity.org/0907-exploits/tophangman-sqlxss.txt

Github

No PoCs found on GitHub currently.