CVEs-PoC/2014/CVE-2014-8339.md

CVE-2014-8339

Description

SQL injection vulnerability in midroll.php in Nuevolab Nuevoplayer for ClipShare 8.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ch parameter.

POC

Reference

• http://packetstormsecurity.com/files/128909/Nuevolabs-Nuevoplayer-For-Clipshare-SQL-Injection.html
• http://www.youtube.com/watch?v=_-oOI1LnEdk

Github

No PoCs found on GitHub currently.