Vulnerabilities > CVE-2007-3000 - Input Validation vulnerability in PHP Jackknife PHP Jackknife 2.21
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
Multiple SQL injection vulnerabilities in PHP JackKnife (PHPJK) allow remote attackers to execute arbitrary SQL commands via (1) the iCategoryUnq parameter to G_Display.php or (2) the iSearchID parameter to Search/DisplayResults.php.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |
Exploit-Db
description PHP JackKnife 2.21 (PHPJK) Search/DisplayResults.php iSearchID Parameter SQL Injection. CVE-2007-3000. Webapps exploit for php platform id EDB-ID:30113 last seen 2016-02-03 modified 2007-05-31 published 2007-05-31 reporter laurent gaffie source https://www.exploit-db.com/download/30113/ title PHP JackKnife 2.21 PHPJK Search/DisplayResults.php iSearchID Parameter SQL Injection description PHP JackKnife 2.21 (PHPJK) G_Display.php iCategoryUnq Parameter SQL Injection. CVE-2007-3000. Webapps exploit for php platform id EDB-ID:30112 last seen 2016-02-03 modified 2007-05-31 published 2007-05-31 reporter laurent gaffie source https://www.exploit-db.com/download/30112/ title PHP JackKnife 2.21 PHPJK G_Display.php iCategoryUnq Parameter SQL Injection