CVE-2007-1250

ANGEL Learning Management Suite 7.1 - SQL Injection via id Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-1250. PoCs published by Craig Heffner.

AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in Angel Learning Management Suite 7.1, allowing unauthenticated users to extract sensitive data such as usernames, passwords, and other database records via crafted HTTP requests.

Description

SQL injection vulnerability in section/default.asp in ANGEL Learning Management Suite (LMS) 7.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Craig Heffner · textwebappsasp
https://www.exploit-db.com/exploits/3390

This exploit demonstrates an SQL injection vulnerability in Angel Learning Management Suite 7.1, allowing unauthenticated users to extract sensitive data such as usernames, passwords, and other database records via crafted HTTP requests.

Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: Angel Learning Management Suite 7.1
No auth needed
Prerequisites: Access to the target web application
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (9)

Core 9
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/32756
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/461811/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/33846
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/461638/100/0/threaded
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/461673/100/0/threaded
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/0807
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/22768
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/3390
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24368

Scores

EPSS 0.0197
EPSS Percentile 77.8%

Details

CWE
CWE-89
Status published
Products (1)
angel_learning/learning_management_suite 7.1
Published Mar 03, 2007
Tracked Since Feb 18, 2026