CVEs-PoC/2009/CVE-2009-2891.md

CVE-2009-2891

Description

SQL injection vulnerability in list.php in PHP Scripts Now Riddles allows remote attackers to execute arbitrary SQL commands via the catid parameter.

POC

Reference

• http://packetstormsecurity.org/0907-exploits/riddledepot-sqlxss.txt
• http://packetstormsecurity.org/0907-exploits/riddledepot-sqlxss.txt

Github

No PoCs found on GitHub currently.