CVEs-PoC/2009/CVE-2009-2790.md

CVE-2009-2790

Description

SQL injection vulnerability in cat_products.php in SoftBiz Dating Script allows remote attackers to execute arbitrary SQL commands via the cid parameter. NOTE: this might overlap CVE-2006-3271.4.

POC

Reference

• http://packetstormsecurity.org/0907-exploits/softbizdating-sql.txt
• http://packetstormsecurity.org/0907-exploits/softbizdating-sql.txt

Github

No PoCs found on GitHub currently.