CVE-2007-6559

EPSS 1.2%

Multiple SQL injection vulnerabilities in Logaholic before 2.0 RC8 allow remote attackers to execute arbitrary SQL commands via (1) the from parameter to index.php or (2) the page parameter to update.php.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/30930unverified exploitdbwww.exploit-db.com/exploits/30929unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/39790 http://osvdb.org/39791 http://secunia.com/advisories/28263 http://securityreason.com/securityalert/3496 http://www.securityfocus.com/archive/1/485480/100/0/threaded http://www.securityfocus.com/archive/1/490101/100/0/threaded http://www.securityfocus.com/bid/27003