CVE-2007-4889: Undefined Security Weakness

The MySQL extension in PHP 5.2.4 and earlier allows remote attackers to bypass safemode and openbasedir restrictions via the MySQL 1 LOADFILE, 2 INTO DUMPFILE, and 3 INTO OUTFILE functions, a different issue than CVE-2007-3997...

ixprim12-sql.txt

!/usr/bin/perl INFORMATIONS ============ Affected.scr..: Ixprim 1.2 Poc.ID........: 16061221 Type..........: Blind SQL Injection Risk.level....: Medium Conditions....: loadfile privilege ixp code only Src.download..: www.ixprim-cms.org Poc.link......: acid-root.new.fr/poc/16061221.txt...

Ixprim CMS 1.2 - Blind SQL Injection

Ixprim CMS 1.2 - Blind SQL Injection !/usr/bin/perl INFORMATIONS ============ Affected.scr..: Ixprim 1.2 Poc.ID........: 16061221 Type..........: Blind SQL Injection Risk.level....: Medium Conditions....: loadfile privilege ixp code only Src.download..: www.ixprim-cms.org Poc.link......:...

Ixprim CMS 1.2 Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================= Ixprim CMS 1.2 Remote Blind SQL Injection Exploit ================================================= !/usr/bin/perl INFORMATIONS ============ Affected.scr..: Ixprim 1.2 Type..........: Blind...