CVE-2015-4137 - SQL injection vulnerability in related.php in Milw0rm Clone Script 1.0 allows remote attackers to execute arbitrary SQL commands via the program parameter

Back Back to CVE browser

HIGH

SQL injection vulnerability in related.php in Milw0rm Clone Script 1.0 allows remote attackers to execute arbitrary SQL commands via the program parameter

Published May 29, 2015

7.5

HIGH

CVSS 2.0

EPSS 2.46%

Description

SQL injection vulnerability in related.php in Milw0rm Clone Script 1.0 allows remote attackers to execute arbitrary SQL commands via the program parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (5)

http://packetstormsecurity.com/files/131981/Milw0rm-Clone-Script-1.0-SQL-Injection.html
x_refsource_MISCExploit
http://seclists.org/fulldisclosure/2015/May/76
mailing-listx_refsource_FULLDISCExploit
http://www.securityfocus.com/bid/74745
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-4161
Advisory
https://www.exploit-db.com/exploits/37248/
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://packetstormsecurity.com/files/131981/Milw0rm-Clone-Script-1.0-SQL-Injection.html		x_refsource_MISCExploit
http://seclists.org/fulldisclosure/2015/May/76		mailing-listx_refsource_FULLDISCExploit
http://www.securityfocus.com/bid/74745		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-4161		Advisory
https://www.exploit-db.com/exploits/37248/		exploitx_refsource_EXPLOIT-DB