Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 31/12/2004 Updated: 11/07/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

SQL injection vulnerability in pmwh.php in PHPMyWebHosting 0.3.4 and previous versions allows remote malicious users to modify SQL statements via the password parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
phpmywebhosting phpmywebhosting

#!/usr/bin/perl # Exploit code by Noam Rathaus of Beyond Security Ltd # The following exploit code will use a valid username and password combination, to cause an SQL injection # Using the SQL injection, the Perl script elevates the privileges of the user provided to administrative use IO::Socket; use strict; my $Host = shift; my $Path = shi ...

NVD-CWE-Other http://archives.neohapsis.com/archives/bugtraq/2004-08/0207.html http://archives.neohapsis.com/archives/bugtraq/2004-09/0247.html http://www.securityfocus.com/bid/10942 http://www.osvdb.org/8976 https://exchange.xforce.ibmcloud.com/vulnerabilities/17005 https://nvd.nist.gov https://www.exploit-db.com/exploits/406/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2004-2218

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect