7.5
CVSSv2

CVE-2007-1617

Published: 23/03/2007 Updated: 19/10/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in index.php in ScriptMagix Recipes 2.0 and previous versions allows remote malicious users to execute arbitrary SQL commands via the catid parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

scriptmagix scriptmagix recipes

Exploits

#!/usr/bin/perl #[Script Name: ScriptMagix Recipes <= 20 (indexphp catid) Remote Blind SQL Injection Exploit #[Coded by : ajann #[Author : ajann #[Contact : :( #[SPage : wwwscriptmagixcom #[$$ : 35$ #[ : ajann,Turkey use IO::Socket; if(@ARGV < 1){ print " [=========================================== ...