EDB-4082

functional

LiveCMS 3.4 - 'categoria.php?cid' SQL Injection

view exploit source exploit_dbverifiedtype webappsauthor g00nspublished 2007-06-20catalog exploit_db

exploited CVEs (4)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2007-3290US	high9.3	3.11% (88th)	Exploit	2007-06-20
categoria.php in LiveCMS 3.4 and earlier allows remote attackers to obtain sensitive information via a ' (quote) character in the cid parameter, which reveals the path in a forced…
CVE-2007-3291US	medium4.3	1.57% (75th)	Exploit	2007-06-20
Cross-site scripting (XSS) vulnerability in LiveCMS 3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via an article name, possibly involving the titul…
CVE-2007-3292US	high7.5	2.45% (84th)	Exploit	2007-06-20
Unrestricted file upload vulnerability in LiveCMS 3.4 and earlier allows remote attackers to upload and execute arbitrary PHP code by specifying a PHP file type in a parameter inte…
CVE-2007-3293US	high7.5	1.26% (69th)	Exploit	2007-06-20
SQL injection vulnerability in categoria.php in LiveCMS 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.