20270vdb entry
http://www.securityfocus.com/bid/20270 CVE-2006-5140
PHP Krazy Image Hosting 0.7a - 'display.php' SQL Injection
Record summary
CVE-2006-5140 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
SQL injection vulnerability in display.php in Lappy512 PHP Krazy Image Host Script (phpkimagehost) 0.7a allows remote attackers to execute arbitrary SQL commands via the id parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBPHP Krazy Image Hosting 0.7a - 'display.php' SQL InjectionExploitDB exploitby TrexNot analyzed1 file
References
4phpkrazyimage-display-sql-injection(29270)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/29270 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2006-5140 2456exploit
https://www.exploit-db.com/exploits/2456