7.5
CVSSv2

CVE-2007-6622

Published: 04/01/2008 Updated: 29/09/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in security.php in ZeusCMS 0.3 and previous versions allows remote malicious users to execute arbitrary SQL commands via the Referer HTTP header.

Vulnerable Product Search on Vulmon Subscribe to Product

zeuscms zeuscms

Exploits

<? /* ------------------------------------------------- ZeusCMS <= 03 Remote Blind SQL Injection Exploit ------------------------------------------------- author: EgiX mail: n0b0d13s[at]gmail[dot]com link: wwwzeuscmsgr/ details: works with magic_quotes_gpc = off (if magic quotes affects also $_SERVER arra ...