cve/2013/CVE-2013-3050.md

CVE-2013-3050

Description

SQL injection vulnerability in ZAPms 1.41 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter to product.

POC

Reference

• http://packetstormsecurity.com/files/121202/ZAPms-1.41-SQL-Injection.html
• http://packetstormsecurity.com/files/121202/ZAPms-1.41-SQL-Injection.html
• http://www.exploit-db.com/exploits/24942
• http://www.exploit-db.com/exploits/24942

Github

No PoCs found on GitHub currently.