Vulnerabilities > CVE-2007-3521 - SQL Injection vulnerability in Arcadebuilder Game Portal Manager 1.7

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
arcadebuilder
exploit available
NVD
Published: 2007-07-03
Updated: 2017-09-29

Summary

SQL injection vulnerability in ArcadeBuilder Game Portal Manager 1.7 allows remote attackers to execute arbitrary SQL commands via a usercookie cookie.

Vulnerable Configurations

Part Description Count
Application
Arcadebuilder
1

Exploit-Db

descriptionArcadeBuilder Game Portal Manager 1.7 Remote SQL Injection Vuln. CVE-2007-3521. Webapps exploit for php platform
fileexploits/php/webapps/4133.txt
idEDB-ID:4133
last seen2016-01-31
modified2007-07-01
platformphp
port
published2007-07-01
reportert0pP8uZz
sourcehttps://www.exploit-db.com/download/4133/
titleArcadeBuilder Game Portal Manager 1.7 - Remote SQL Injection Vuln
typewebapps

References