CVE-2010-2916

Description

SQL injection vulnerability in news.php in AJ Square AJ HYIP MERIDIAN allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected products

• ajsquare / aj_hyipmeridian – meridian

References

• EXPLOIThttp://www.exploit-db.com/exploits/14436
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/60590
• EXPLOIThttp://packetstormsecurity.org/1007-exploits/ajhyipmeridian-sql.txt