CVE-2010-2915

Description

SQL injection vulnerability in welcome.php in AJ Square AJ HYIP PRIME allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected products

• ajsquare / aj_hyipprime – prime

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/60589
• EXPLOIThttp://packetstormsecurity.org/0907-exploits/ajhypeprime-sql.txt
• EXPLOIThttp://www.exploit-db.com/exploits/14435