high7.5Public exploit code
CVE-2007-3631
SQL injection vulnerability in index.php in GameSiteScript (gss) 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the params param…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- GameSiteScript 3.1 - profile id SQL Injection2007-07-07 · webapps · php · Verified
Impact
SQL injection vulnerability in index.php in GameSiteScript (gss) 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the params parameter, related to missing input validation of the id field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gamesitescript | Gamesitescript | through 3.1 |
References
- NVD record
- CVE.org record
- http://osvdb.org/36362
- http://secunia.com/advisories/25983
- http://www.securityfocus.com/bid/24807
- http://www.vupen.com/english/advisories/2007/2460
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35292
- https://www.exploit-db.com/exploits/4159
- http://osvdb.org/36362
- http://secunia.com/advisories/25983
- http://www.securityfocus.com/bid/24807
- http://www.vupen.com/english/advisories/2007/2460
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35292
- https://www.exploit-db.com/exploits/4159