mirror of
https://github.com/0xMarcio/cve.git
synced 2026-02-13 03:02:49 +00:00
727 B
727 B
CVE-2011-2917
Description
SQL injection vulnerability in administrator/index2.php in Mambo CMS 4.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the zorder parameter.
POC
Reference
- http://www.openwall.com/lists/oss-security/2011/08/12/6
- http://yehg.net/lab/pr0js/advisories/%5Bmambo4.6_x%5D_sql_injection
Github
No PoCs found on GitHub currently.