mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-09 23:27:33 +02:00
0xMarcio
1.0 KiB
1.0 KiB
CVE-2015-6516
Description
SQL injection vulnerability in cygnux.org sysPass 1.0.9 and earlier allows remote authenticated users to execute arbitrary SQL commands via the search parameter to ajax/ajax_search.php.
POC
Reference
- http://packetstormsecurity.com/files/132672/sysPass-1.0.9-SQL-Injection.html
- http://packetstormsecurity.com/files/132672/sysPass-1.0.9-SQL-Injection.html
- https://www.exploit-db.com/exploits/37610/
- https://www.exploit-db.com/exploits/37610/
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2015-031.txt
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2015-031.txt
Github
No PoCs found on GitHub currently.