high7.5Public exploit code
CVE-2007-4952
SQL injection vulnerability in article.php in OmniStar Article Manager allows remote attackers to execute arbitrary SQL commands via the page_id parameter in a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Omnistar Article Manager Software - 'article.php' SQL Injection2007-09-16 · webapps · php · Verified
Impact
SQL injection vulnerability in article.php in OmniStar Article Manager allows remote attackers to execute arbitrary SQL commands via the page_id parameter in a favorite op action, a different vector than CVE-2006-5917.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Omnistar Interactive | Omnistar Article Manager | All versions |