CVE-2007-3000

EPSS 1.2%

Multiple SQL injection vulnerabilities in PHP JackKnife (PHPJK) allow remote attackers to execute arbitrary SQL commands via (1) the iCategoryUnq parameter to G_Display.php or (2) the iSearchID parameter to Search/DisplayResults.php.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/30112unverified exploitdbwww.exploit-db.com/exploits/30113unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/36318 http://osvdb.org/36319 http://secunia.com/advisories/25487 http://securityreason.com/securityalert/2768 https://exchange.xforce.ibmcloud.com/vulnerabilities/34641 http://www.securityfocus.com/archive/1/470111/100/0/threaded http://www.securityfocus.com/bid/24253