medium6.5Public exploit code
CVE-2007-1254
SQL injection vulnerability in part.userprofile.php in Connectix Boards 0.7 and earlier allows remote authenticated users to execute arbitrary SQL commands and…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Connectix Boards 0.7 - 'p_skin' Multiple Vulnerabilities2007-02-21 · webapps · php · Verified
Impact
SQL injection vulnerability in part.userprofile.php in Connectix Boards 0.7 and earlier allows remote authenticated users to execute arbitrary SQL commands and obtain privileges via the p_skin parameter to index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Connectix | Connectix Boards | Versions 0.4, 0.4.1, 0.4.2, 0.4.3, 0.4.4, 0.5 |
References
- NVD record
- CVE.org record
- http://osvdb.org/33537
- http://secunia.com/advisories/24255
- http://securityreason.com/securityalert/2364
- http://www.securityfocus.com/archive/1/460947/100/0/threaded
- https://www.exploit-db.com/exploits/3352
- http://osvdb.org/33537
- http://secunia.com/advisories/24255
- http://securityreason.com/securityalert/2364
- http://www.securityfocus.com/archive/1/460947/100/0/threaded
- https://www.exploit-db.com/exploits/3352