CVE-2007-3808

EPSS 2.5%

SQL injection vulnerability in includes/search.php in paFileDB 3.6 allows remote attackers to execute arbitrary SQL commands via the categories[] parameter in a search action to index.php, a different vector than CVE-2005-2000.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/4186unverified exploitdbwww.exploit-db.com/exploits/4186unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0291.html http://osvdb.org/36247 http://secunia.com/advisories/26078 https://exchange.xforce.ibmcloud.com/vulnerabilities/35412 http://www.exploit-db.com/exploits/4186 http://www.securityfocus.com/bid/24914