cve/2009/CVE-2009-3436.md
2024-05-26 14:27:05 +02:00

697 B

CVE-2009-3436

Description

Multiple SQL injection vulnerabilities in forum.asp in MaxWebPortal allow remote attackers to execute arbitrary SQL commands via the (1) FORUM_ID or (2) CAT_ID parameter. NOTE: this might overlap CVE-2005-1417.

POC

Reference

Github

No PoCs found on GitHub currently.