SQL Injection Vulnerability in Project'Or RIA by Project'Or
CVE-2013-6164
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2013-6164?
An SQL injection vulnerability exists in the view/objectDetail.php file of Project'Or RIA 3.4.0, enabling remote attackers to manipulate SQL queries by injecting arbitrary SQL commands through the objectId parameter. This flaw potentially exposes sensitive database information, allowing unauthorized access to the database and file system.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.