cve/2010/CVE-2010-4974.md

CVE-2010-4974

Description

SQL injection vulnerability in info.php in BrotherScripts (BS) and ScriptsFeed Auto Dealer allows remote attackers to execute arbitrary SQL commands via the id parameter.

POC

Reference

• http://packetstormsecurity.org/1007-exploits/bsautodealer-sql.txt
• http://securityreason.com/securityalert/8489
• http://www.exploit-db.com/exploits/14239

Github

No PoCs found on GitHub currently.