7.5
CVSSv2

CVE-2007-1615

Published: 23/03/2007 Updated: 19/10/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in index.php in ScriptMagix Jokes 2.0 and previous versions allows remote malicious users to execute arbitrary SQL commands via the catid parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

scriptmagix scriptmagix jokes

Exploits

#!/usr/bin/perl #[Script Name: ScriptMagix Jokes <= 20 (indexphp catid) Remote Blind SQL Injection Exploit #[Coded by : ajann #[Author : ajann #[Contact : :( #[SPage : wwwscriptmagixcom #[$$ : 35$ #[ : ajann,Turkey use IO::Socket; if(@ARGV < 1){ print " [============================================= ...