CVE-2015-2237 | BDVDB-2026-68445 Detail

Description#

Multiple SQL injection vulnerabilities in Betster (aka PHP Betoffice) 1.0.4 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) showprofile.php or (2) categoryedit.php or (3) username parameter in a login to index.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.exploit-db.com/exploits/36306/
http://www.securityfocus.com/archive/1/534816/100/0/threaded
http://packetstormsecurity.com/files/130696/Betster-1.0.4-SQL-Injection-Authentication-Bypass.html

Exploit#

https://www.exploit-db.com/exploits/36306/

History#

Version 12015-03-12Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.