high7.5Public exploit code
CVE-2007-0598
SQL injection vulnerability in forum/load.php in Aztek Forum 4.00 allows remote attackers to execute arbitrary SQL commands via the fid cookie to forum.php.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Aztek Forum 4.0 - Multiple Vulnerabilities2007-01-25 · webapps · php · Verified
Impact
SQL injection vulnerability in forum/load.php in Aztek Forum 4.00 allows remote attackers to execute arbitrary SQL commands via the fid cookie to forum.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aztek Forum | Aztek Forum | Version 4.0 |
References
- NVD record
- CVE.org record
- http://acid-root.new.fr/poc/21070125.txt
- http://osvdb.org/33595
- http://www.securityfocus.com/archive/1/458076/100/0/threaded
- http://www.securityfocus.com/archive/1/458123/100/0/threaded
- http://acid-root.new.fr/poc/21070125.txt
- http://osvdb.org/33595
- http://www.securityfocus.com/archive/1/458076/100/0/threaded
- http://www.securityfocus.com/archive/1/458123/100/0/threaded