CVE-2009-1843
published 2009-06-01CVE-2009-1843: Multiple SQL injection vulnerabilities in Flash Quiz Beta 2 allow remote attackers to execute arbitrary SQL commands via the (1) quiz parameter to (a)…
PriorityP341high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
0.96%
57.1th percentile
Multiple SQL injection vulnerabilities in Flash Quiz Beta 2 allow remote attackers to execute arbitrary SQL commands via the (1) quiz parameter to (a) num_questions.php, (b) answers.php, (c) high_score.php, (d) high_score_web.php, (e) results_table_web.php, and (f) question.php; and the (2) order_number parameter to (g) answers.php and (h) question.php.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| glenn_mcgurrin | flash_quiz | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Flash Quiz Beta 2 - Multiple SQL Injections
exploitdb·2009-05-21
CVE-2009-1843 Flash Quiz Beta 2 - Multiple SQL Injections
Flash Quiz Beta 2 - Multiple SQL Injections
---
** **
** **
** [] [] [] [][][][> [] [] [][ ][] [] [][]] [] [> [][][][> [][][][] **
** || || || [] [][] [] [] [] [] [] [] [] [] [] [] **
** [> [][][][] [][][][> [] [] [] [] [] [][] [] [][] [][][][> [] [] **
** [-----[]-----[][][][>--[]--[]-[]---[][][]--[]-[]--[]--------[]-----[][][][>--[][][][]---\
**==[> [] [] [] [][] [] [] [][][] [] [][] [] [] [] >>--
** [----[[]]----[]--- ----[]-----[]---[]--[]-----[]--[]-------[] []---[]----------[]--[]---/
[> [[[]]] [][][][> [][] [] [][[] [[]] [][] [][][] [] [> [][][][> WEB: http://sourceforge.net/projects/flashquiz/ |
|-->DOWNLOAD: http://sourceforge.net/projects/flashquiz/ |
|-->DEMO: N/A |
|-->CATEGORY: CMS / Testing |
|-->DESCRIPTION: A Flash quiz system with a PHP/MYSQL back end supporting multiple
Exploit-DB
WordPress MU < 2.7 - 'HOST' HTTP Header Cross-Site Scripting
exploitdb·2009-03-10
CVE-2009-1030 WordPress MU < 2.7 - 'HOST' HTTP Header Cross-Site Scripting
WordPress MU
1833
1834
1835
1836
1837 ID );
1839 if( count( $all_blogs ) > 1 ) {
1840 $primary_blog = get_usermeta($current_user->ID,
'primary_blog');
1841 ?>
1842
1843
1844 userblog_id
?>'userblog_id ) echo '
selected="selected"' ?>>http://domain.$blog->path
?>
1845
1846
1847
1852
1853
1854
1855 "
http://www.example.com/wp-admin/profile.php> tmp.html
$ firefox tmp.html
The javascript code will be executed in the context of the victim
browser, this can be exploited to steal cookies and escalate
privileges to administrator.
Tested with Wordpress MU 2.6.5, Apache 2.2 and Mozilla Firefox 3.0.6
V. BUSINESS IMPACT
The impact is the attacker can gain administrator privileges on the
application.
VI. SYSTEMS AFFECTED
Versions prior to 2.7 are affected
VII. SOLUTION
Upgrade to version 2.7 of w
No writeups or analysis indexed.
http://www.securityfocus.com/archive/1/503701/100/0/threadedhttp://www.securityfocus.com/bid/35060https://exchange.xforce.ibmcloud.com/vulnerabilities/50668http://www.securityfocus.com/archive/1/503701/100/0/threadedhttp://www.securityfocus.com/bid/35060https://exchange.xforce.ibmcloud.com/vulnerabilities/50668
2009-06-01
Published