EDB-3850

functional

RunCMS 1.5.2 - 'debug_show.php' SQL Injection

view exploit source exploit_dbverifiedtype webappsauthor rgodpublished 2007-05-04catalog exploit_db

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2007-2538US	high7.5	4.83% (92nd)	Exploit	2007-05-09
SQL injection vulnerability in class/debug/debug_show.php in RunCms 1.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the executed_queries array param…
CVE-2007-2539US	high7.8	7.91% (95th)	Exploit	2007-05-09
The show_files function in RunCms 1.5.2 and earlier allows remote attackers to obtain sensitive information (file existence and file metadata) via unspecified vectors.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.