7.5
CVSSv2

CVE-2010-1343

Published: 09/04/2010 Updated: 17/08/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in photo.php in SiteX 0.7.4 beta allows remote malicious users to execute arbitrary SQL commands via the albumid parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

bjsintay sitex 0.7.4

Exploits

<?php echo "\n\n###########################################################################\n"; echo "## ##\n"; echo "## Product: SiteX CMS 074 beta (/photophp) SQL-Injection exploit ##\n"; echo "## Usage: phpexe sitexphp wwwsitecom /cmspath/ ...