EDB-3762
functionalAimStats 3.2 - 'process.php?update' Remote Code Execution
view exploit source exploit_dbverifiedtype webappsauthor Dj7xplpublished 2007-04-18catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2007-2167US | high7.5 | Exploit | ||
Static code injection vulnerability in process.php in AimStats 3.2 allows remote attackers to inject PHP code into config.php via the number parameter in an update action. | ||||
| CVE-2007-2168US | high7.5 | Exploit | ||
Static code injection vulnerability in process.php in AimStats 3.2 and earlier allows remote attackers to inject PHP code into config.php via the databasehost parameter. NOTE: the… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan