SQL Injection Vulnerability in Powie pNews by Powie
CVE-2008-4347
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2008-4347?
An SQL injection vulnerability in the newskom.php script of Powie pNews version 2.03 allows attackers to execute arbitrary SQL commands through the newsid parameter. This exploitation can lead to unauthorized access to the database, allowing attackers to manipulate, retrieve, or corrupt sensitive information stored within the system.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.