SQL Injection in MAXSITE by MAXSITE
CVE-2008-2487
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2008-2487?
A SQL injection vulnerability exists in the index.php file of MAXSITE versions 1.10 and earlier. This flaw allows remote attackers to manipulate SQL queries through unauthorized input in the category parameter during a webboard action. Successful exploitation can lead to arbitrary SQL command execution, potentially compromising the integrity and security of the application.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.