cve/2009/CVE-2009-3436.md
2024-06-18 02:51:15 +02:00

697 B

CVE-2009-3436

Description

Multiple SQL injection vulnerabilities in forum.asp in MaxWebPortal allow remote attackers to execute arbitrary SQL commands via the (1) FORUM_ID or (2) CAT_ID parameter. NOTE: this might overlap CVE-2005-1417.

POC

Reference

Github

No PoCs found on GitHub currently.