← back
CVE-2007-6058

CVE-2007-6058

EPSS 1.2%
Multiple SQL injection vulnerabilities in index.php in ProfileCMS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) codes action in the profile-codes module, (2) videos action in the video-codes module, or (3) games action in the arcade-games module.
Affected products
n/a · n/a
public PoCs found — 1
cve_referencewww.exploit-db.com/exploits/4627unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://advisories.echo.or.id/adv/adv84-K-159-2007.txthttp://secunia.com/advisories/27730https://exchange.xforce.ibmcloud.com/vulnerabilities/38538https://www.exploit-db.com/exploits/4627http://www.securityfocus.com/archive/1/483889/100/0/threadedhttp://www.securityfocus.com/bid/26490http://www.vupen.com/english/advisories/2007/3908