Record summary

CVE-2006-5140 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.

Description

SQL injection vulnerability in display.php in Lappy512 PHP Krazy Image Host Script (phpkimagehost) 0.7a allows remote attackers to execute arbitrary SQL commands via the id parameter.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBPHP Krazy Image Hosting 0.7a - 'display.php' SQL InjectionExploitDB exploitby TrexNot analyzed1 file
ExploitDB

PoC details

References

4