mirror of
https://github.com/0xMarcio/cve.git
synced 2025-11-28 18:48:49 +00:00
716 B
716 B
CVE-2011-2917
Description
SQL injection vulnerability in administrator/index2.php in Mambo CMS 4.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the zorder parameter.
POC
Reference
- http://www.openwall.com/lists/oss-security/2011/08/12/6
- http://yehg.net/lab/pr0js/advisories/%5Bmambo4.6_x%5D_sql_injection
Github
No PoCs found on GitHub currently.