medium6.4Public exploit code
CVE-2006-2040
Multiple SQL injection vulnerabilities in photokorn 1.53 and 1.542 allow remote attackers to execute arbitrary SQL commands via the (1) cat, (2) pic and (3) pa…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PhotoKorn 1.53/1.54 - 'print.php?cat' SQL Injection2006-04-25 · webapps · php · Verified
- PhotoKorn 1.53/1.54 - 'id' SQL Injection2006-04-25 · webapps · php · Verified
- PhotoKorn 1.53/1.54 - 'index.php' Multiple SQL Injections2006-04-25 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in photokorn 1.53 and 1.542 allow remote attackers to execute arbitrary SQL commands via the (1) cat, (2) pic and (3) page parameter in index.php; (4) id parameter in postcard.php; and (5) cat parameter in print.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Photokorn | Photokorn | Versions 1.53, 1.542 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/19836
- http://securityreason.com/securityalert/789
- http://www.osvdb.org/24981
- http://www.osvdb.org/24982
- http://www.osvdb.org/24983
- http://www.securityfocus.com/archive/1/431982/100/0/threaded
- http://www.securityfocus.com/bid/17683
- http://www.vupen.com/english/advisories/2006/1525
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26066
- http://secunia.com/advisories/19836
- http://securityreason.com/securityalert/789
- http://www.osvdb.org/24981
- http://www.osvdb.org/24982
- http://www.osvdb.org/24983
- http://www.securityfocus.com/archive/1/431982/100/0/threaded
- http://www.securityfocus.com/bid/17683
- http://www.vupen.com/english/advisories/2006/1525
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26066