CVE-2007-1026

xlatunes < 0.1 - SQL Injection via view.php album Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-1026. PoCs published by Bl0od3r.

AI-analyzed exploit summary This is a writeup describing a SQL injection vulnerability in an unspecified web application. It provides a URL with a malicious SQL query to exploit a UNION-based SQLi in the 'album' parameter.

Description

SQL injection vulnerability in view.php in XLAtunes 0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the album parameter in view mode. NOTE: some of these details are obtained from third party information.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Bl0od3r · textwebappsphp

https://www.exploit-db.com/exploits/3327

View Code ZIP pw:eip

This is a writeup describing a SQL injection vulnerability in an unspecified web application. It provides a URL with a malicious SQL query to exploit a UNION-based SQLi in the 'album' parameter.

Classification

Writeup 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Theoretical

Target: unspecified web application (likely a gallery system)

No auth needed

Prerequisites: access to the vulnerable web application

MITRE ATT&CK