CVE-2010-0457

Description

SQL injection vulnerability in home.php in magic-portal 2.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected products

• a3malnet / magic-portal2.1 – 2.1

References

• EXPLOIThttp://www.exploit-db.com/exploits/11235
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/55849
• EXPLOIThttp://packetstormsecurity.org/1001-exploits/magicportal-sql.txt