SQL Injection Vulnerability in AJ Square AJ HYIP Acme Product
CVE-2008-4043
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2008-4043?
Multiple SQL injection vulnerabilities exist in the AJ Square AJ HYIP Acme product. These vulnerabilities permit remote attackers to execute arbitrary SQL commands through the 'artid' parameter on specific PHP files, namely acme/article/comment.php and prime/article/comment.php. Proper validation and sanitization of user inputs are necessary to mitigate these security risks.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.