high7.5Public exploit code
CVE-2007-1556
SQL injection vulnerability in kommentare.php in Creative Files 1.2 allows remote attackers to execute arbitrary SQL commands via the dlid parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Creative Files 1.2 - 'kommentare.php' SQL Injection2007-03-16 · webapps · php · Verified
Impact
SQL injection vulnerability in kommentare.php in Creative Files 1.2 allows remote attackers to execute arbitrary SQL commands via the dlid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thecreativeheads.De | Creative Files | Version 1.2 |
References
- NVD record
- CVE.org record
- http://osvdb.org/33747
- http://www.securityfocus.com/bid/23000
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33021
- https://www.exploit-db.com/exploits/3498
- http://osvdb.org/33747
- http://www.securityfocus.com/bid/23000
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33021
- https://www.exploit-db.com/exploits/3498