7.5
CVSSv2

CVE-2007-3051

Published: 06/06/2007 Updated: 16/10/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in inc/class_users.php in RevokeSoft RevokeBB 1.0 RC4 and previous versions allows remote malicious users to execute arbitrary SQL commands via the revokebb_user cookie.

Vulnerable Product Search on Vulmon Subscribe to Product

revokesoft revokebb

Exploits

#!/usr/bin/php -q -d short_open_tag=on <? echo " ------------------------------------------------------------- RevokeBB <= 10 RC4 Blind SQL Injection / Hash Retrieve Exploit Site: wwwrevokesoftnet by BlackHawk <hawkgotyou@gmailcom> <itablackhawkaltervistaorg> Thanks to rgod for the php code and Marty for the ...