CVEs-PoC/2009/CVE-2009-0104.md

CVE-2009-0104

Description

SQL injection vulnerability in index.php in EZpack 4.2b2 allows remote attackers to execute arbitrary SQL commands via the qType parameter in a webboard prog action.

POC

Reference

• http://securityreason.com/securityalert/4890
• http://securityreason.com/securityalert/4890
• https://www.exploit-db.com/exploits/7680
• https://www.exploit-db.com/exploits/7680

Github

No PoCs found on GitHub currently.