SQL Injection Vulnerability in AJ Square's AJ HYIP Acme Software
CVE-2008-2532
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2008-2532?
An SQL injection vulnerability exists in the forum/topic_detail.php file of AJ Square's AJ HYIP Acme product. This flaw enables remote attackers to manipulate SQL queries by exploiting the 'id' parameter, potentially leading to unauthorized access to the database and execution of arbitrary SQL commands. As a result, sensitive information may be exposed, and the integrity of the application could be compromised.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.