high7.5Public exploit code
CVE-2007-1978
SQL injection vulnerability in index.php in the Arcade 1.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid paramet…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP-Fusion Module Arcade 1.0 - 'cid' SQL Injection2007-04-02 · webapps · php · Verified
Impact
SQL injection vulnerability in index.php in the Arcade 1.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view_game_list action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php Fusion | Arcade Module | Version 1.00 |
References
- NVD record
- CVE.org record
- http://osvdb.org/37410
- http://www.vupen.com/english/advisories/2007/1205
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33361
- https://www.exploit-db.com/exploits/3640
- http://osvdb.org/37410
- http://www.vupen.com/english/advisories/2007/1205
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33361
- https://www.exploit-db.com/exploits/3640