7.5
CVSSv2

CVE-2007-5016

Published: 20/09/2007 Updated: 29/09/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in userreviews.php in OneCMS 2.4 allows remote malicious users to execute arbitrary SQL commands via the abc parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

insane visions onecms 2.4

Exploits

#!/usr/bin/perl # # OneCMS v24 Remote SQL Injection Exploit # # Description # ----------- # OneCMS contains a flaw that allows an attacker to carry out an SQL # injection attack The issue is due to the userreviewsphp script not # properly sanitizing user-supplied input to the 'abc' variable This may # allow an attacker to inject or manipula ...