high7.5Public exploit code
CVE-2007-2299
Multiple SQL injection vulnerabilities in Frogss CMS 0.7 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) dzial parameter to (a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Frogss CMS 0.7 - SQL Injection2007-04-13 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in Frogss CMS 0.7 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) dzial parameter to (a) katalog.php, or the (2) t parameter to (b) forum.php or (c) forum/viewtopic.php, different vectors than CVE-2006-4536.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Frogss | Frogss Cms | through 0.7 |
References
- NVD record
- CVE.org record
- http://osvdb.org/35526
- http://osvdb.org/35527
- http://osvdb.org/35528
- http://www.securityfocus.com/bid/23476
- http://www.vupen.com/english/advisories/2007/1388
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33640
- https://www.exploit-db.com/exploits/3731
- http://osvdb.org/35526
- http://osvdb.org/35527
- http://osvdb.org/35528
- http://www.securityfocus.com/bid/23476
- http://www.vupen.com/english/advisories/2007/1388
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33640
- https://www.exploit-db.com/exploits/3731