Lucene search

K
exploitdbFrogEDB-ID:23064
HistoryAug 26, 2003 - 12:00 a.m.

Attila PHP 3.0 - SQL Injection Unauthorized Privileged Access

2003-08-2600:00:00
frog
www.exploit-db.com
21

AI Score

7.4

Confidence

Low

EPSS

0.003

Percentile

66.1%

source: https://www.securityfocus.com/bid/8502/info

An SQL injection vulnerability has been reported in Attila PHP that could allow an attacker to gain unauthorized privileged access to a target site. This could be accomplished by requesting a URI including parameters designed to influence the results of specific user verification checks. Privileged access to a site implementing Attila PHP could allow an attacker to gain sensitive information or launch other attacks. 

Set the URI parameter "cook_id" to the value "0 OR visiteur=1" in a request to
http://www.example.org/index.php3 

AI Score

7.4

Confidence

Low

EPSS

0.003

Percentile

66.1%

Related for EDB-ID:23064