CVEs-PoC/2010/CVE-2010-0698.md

CVE-2010-0698

Description

SQL injection vulnerability in backoffice/login.asp in Dynamicsoft WSC CMS 2.2 allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: some of these details are obtained from third party information.

POC

Reference

• http://packetstormsecurity.org/1002-exploits/wsccms-sql.txt

Github

No PoCs found on GitHub currently.