cve/2009/CVE-2009-3119.md

CVE-2009-3119

Description

SQL injection vulnerability in screen.php in the Download System mSF (dsmsf) module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the view_id parameter.

POC

Reference

• http://packetstormsecurity.org/0908-exploits/phpfusiondsmsf-sql.txt

Github

No PoCs found on GitHub currently.