CVE-2007-6202

EPSS 2.2%

SQL injection vulnerability in plugins/search/search.php in Neocrome Seditio CMS 121 and earlier allows remote attackers to execute arbitrary SQL commands via the pag_sub[] parameter to plug.php.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4678unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/38924 http://secunia.com/advisories/27881 https://exchange.xforce.ibmcloud.com/vulnerabilities/38774 https://www.exploit-db.com/exploits/4678 http://www.neocrome.net/page.php?id=2349 http://www.securityfocus.com/bid/26655