SQL Injection Vulnerabilities in PHPRunner by PHPRunner
CVE-2009-0963

Currently unrated

Key Information:

Vendor

Xlinesoft

Status
PHPrunner
Vendor
CVE Published:
19 March 2009

Badges

👾 Exploit Exists

What is CVE-2009-0963?

PHPRunner versions 4.2 and potentially earlier are susceptible to multiple SQL injection vulnerabilities. These flaws enable remote attackers to execute arbitrary SQL queries via the SearchField parameter, affecting various PHP scripts including UserView_list.php, orders_list.php, users_list.php, and Administrator_list.php. This could lead to unauthorized data access or manipulation, compromising the integrity and confidentiality of sensitive information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.securityfocus.com/bid/34146
vdb-entryx_refsource_BID
http://www.securityfocus.com/archive/1/501894/100/0/threaded
mailing-listx_refsource_BUGTRAQ
https://www.exploit-db.com/exploits/8226
exploitx_refsource_EXPLOIT-DB

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

JSON
.