EDB-4637
functionalbcoos 1.0.10 - Local File Inclusion / SQL Injection
view exploit source exploit_dbverifiedtype webappsauthor BugReport.IRpublished 2007-11-20catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2007-6079US | medium6.8 | Exploit | ||
Directory traversal vulnerability in include/common.php in bcoos 1.0.10 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the xoopsOption[p… | ||||
| CVE-2007-6080US | high7.5 | Exploit | ||
SQL injection vulnerability in modules/banners/click.php in the banners module for bcoos 1.0.10 allows remote attackers to execute arbitrary SQL commands via the bid parameter. NO… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan