medium5.8Public exploit code
CVE-2007-1293
SQL injection vulnerability in Rigter Portal System (RPS) 6.2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Rigter Portal System (RPS) 6.2 - Blind SQL Injection2007-03-04 · webapps · php · Verified
Impact
SQL injection vulnerability in Rigter Portal System (RPS) 6.2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the categoria parameter to the top-level URI (index.php), possibly related to ver_descarga.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rigter Portal System | Rigter Portal System | Version 6.2 |
References
- NVD record
- CVE.org record
- http://osvdb.org/33831
- http://secunia.com/advisories/24382
- http://www.securityfocus.com/archive/1/462146/100/0/threaded
- http://www.securityfocus.com/bid/22813
- http://www.vupen.com/english/advisories/2007/0813
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32784
- https://www.exploit-db.com/exploits/3403
- http://osvdb.org/33831
- http://secunia.com/advisories/24382
- http://www.securityfocus.com/archive/1/462146/100/0/threaded
- http://www.securityfocus.com/bid/22813
- http://www.vupen.com/english/advisories/2007/0813
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32784
- https://www.exploit-db.com/exploits/3403