Vulnerabilities > CVE-2007-4054 - SQL Injection vulnerability in PHP123 Top Sites Category.PHP

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
php123
exploit available

Summary

SQL injection vulnerability in category.php in PHP123 Top Sites allows remote attackers to execute arbitrary SQL commands via the cat parameter.

Vulnerable Configurations

Part Description Count
Application
Php123
1

Exploit-Db

descriptionPHP123 Top Sites (category.php cat) Remote SQL Injection Vuln. CVE-2007-4054. Webapps exploit for php platform
fileexploits/php/webapps/4241.txt
idEDB-ID:4241
last seen2016-01-31
modified2007-07-28
platformphp
port
published2007-07-28
reportert0pP8uZz
sourcehttps://www.exploit-db.com/download/4241/
titlePHP123 Top Sites category.php cat Remote SQL Injection Vuln
typewebapps