high7.5Public exploit code
CVE-2007-3234
SQL injection vulnerability in low.php in Fuzzylime Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the topic parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Fuzzylime Forum 1.0 - 'low.php?topic' SQL Injection2007-06-12 · webapps · php · Verified
Impact
SQL injection vulnerability in low.php in Fuzzylime Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the topic parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fuzzylime Forum | Fuzzylime Forum | Version 1.0 |
References
- NVD record
- CVE.org record
- http://osvdb.org/36404
- http://secunia.com/advisories/25653
- http://www.securityfocus.com/bid/24451
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34838
- https://www.exploit-db.com/exploits/4062
- http://osvdb.org/36404
- http://secunia.com/advisories/25653
- http://www.securityfocus.com/bid/24451
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34838
- https://www.exploit-db.com/exploits/4062