CVE-2007-5180

EPSS 1.2%

Multiple SQL injection vulnerabilities in Ohesa Emlak Portali allow remote attackers to execute arbitrary SQL commands via the (1) Kategori parameter in satilik.asp and the (2) Emlak parameter in detay.asp.

Affected products

n/a · n/a

public PoCs found — 3

cve_referencepacketstormsecurity.org/0709-exploits/ohesa-sql.txtunverified exploitdbwww.exploit-db.com/exploits/30626unverified exploitdbwww.exploit-db.com/exploits/30625unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/37407 http://osvdb.org/37408 http://packetstormsecurity.org/0709-exploits/ohesa-sql.txt http://secunia.com/advisories/27033 https://exchange.xforce.ibmcloud.com/vulnerabilities/36877 http://www.securityfocus.com/bid/25880 http://www.vupen.com/english/advisories/2007/3319