7.5
CVSSv2

CVE-2008-4073

Published: 15/09/2008 Updated: 29/09/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 760
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote malicious users to execute arbitrary SQL commands via the pageid parameter in a DBpAGE action.

Vulnerable Product Search on Vulmon Subscribe to Product

zanfi solutions autodealers cms autonline

Exploits

############################################################################################################ [+] Autodealers CMS AutOnline (id) SQL Injection Vulnerability [+] Discovered By ZoRLu [+] home: z0rlublogspotcom & yildirimordulariorg & r00tsecurityorg & darkc0deorg [+] Greetz: str0ke, FaLCaTa, ProgenT ...
################################################################ # ___ __ _______ ___ # # __| _/____ _______| | __ ____ \ _ \ __| _/____ # # / __ |\__ \\_ __ \ |/ // ___\/ /_\ \ / __ |/ __ \ # # / /_/ | / __ \| | \/ <\ \___\ \_/ \/ /_/ \ ___/ # # \____ |(_____ ...