CVE-2009-0750 SQL injection vulnerability in login.php in the smNews example script for txtSQL 2.2 Final allows remote attackers to execute arbitrary SQL commands via the username parameter.
HighCVSS 7.5
EPSS 1.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in login.php in the smNews example script for txtSQL 2.2 Final allows remote attackers to execute arbitrary SQL commands via the username parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tombstone smnews | All versions | No fix listed |
References
- smnews-login-sql-injection(48813) vdb-entry
- 8076 exploit