EDB-4082

funktional

LiveCMS 3.4 - 'categoria.php?cid' SQL Injection

Exploit ansehen Quelle exploit_dbverifiziertTyp webappsAutor g00nsveröffentlicht 2007-06-20Katalog exploit_db

ausgenutzte CVEs (4)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2007-3290US	high9.3	3.11% (88th)	Exploit	2007-06-20
categoria.php in LiveCMS 3.4 and earlier allows remote attackers to obtain sensitive information via a ' (quote) character in the cid parameter, which reveals the path in a forced…
CVE-2007-3291US	medium4.3	1.57% (75th)	Exploit	2007-06-20
Cross-site scripting (XSS) vulnerability in LiveCMS 3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via an article name, possibly involving the titul…
CVE-2007-3292US	high7.5	2.45% (84th)	Exploit	2007-06-20
Unrestricted file upload vulnerability in LiveCMS 3.4 and earlier allows remote attackers to upload and execute arbitrary PHP code by specifying a PHP file type in a parameter inte…
CVE-2007-3293US	high7.5	1.26% (69th)	Exploit	2007-06-20
SQL injection vulnerability in categoria.php in LiveCMS 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter.

scry

Funktionierende Exploits wie dieser zielen auf über das Internet erreichbare Systeme. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.