CVE-2007-1612

katalog_plyt_audio < 1.0 - SQL Injection via kolumna Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-1612. PoCs published by Kacper.

AI-analyzed exploit summary This exploit targets a SQL injection vulnerability in 'Katalog Plyt Audio' (pl) <= 1.0. It crafts a malicious SQL query via the 'fraza' and 'kolumna' parameters to extract the administrator's password hash from the database.

Description

SQL injection vulnerability in index.php in Katalog Plyt Audio 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the kolumna parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Kacper · phpwebappsphp

https://www.exploit-db.com/exploits/3513

View Code ZIP pw:eip

This exploit targets a SQL injection vulnerability in 'Katalog Plyt Audio' (pl) <= 1.0. It crafts a malicious SQL query via the 'fraza' and 'kolumna' parameters to extract the administrator's password hash from the database.

Classification

Working Poc 95%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: Katalog Plyt Audio (pl) <= 1.0

No auth needed

Prerequisites: Target must have the vulnerable software installed and accessible

MITRE ATT&CK