CVE-2007-0202

alex_guestbook 4.0.2 - SQL Injection via Lang Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-0202. PoCs published by DarkFig.

AI-analyzed exploit summary This exploit targets @lex Guestbook <= 4.0.2, leveraging SQL injection to extract admin credentials, then using directory traversal to write a malicious PHP skin file for remote command execution.

Description

SQL injection vulnerability in index.php in @lex Guestbook 4.0.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the lang parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by DarkFig · phpwebappsphp

https://www.exploit-db.com/exploits/3103

View Code ZIP pw:eip

This exploit targets @lex Guestbook <= 4.0.2, leveraging SQL injection to extract admin credentials, then using directory traversal to write a malicious PHP skin file for remote command execution.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: @lex Guestbook <= 4.0.2

No auth needed

Prerequisites: Target must be running @lex Guestbook <= 4.0.2 · PHP must be installed on the target server

MITRE ATT&CK