CVE-2007-1619
scriptmagix_photo_rating < 2.0 - SQL Injection via viewcomments.php phid Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-1619. PoCs published by ajann.
AI-analyzed exploit summary This Perl script exploits a blind SQL injection vulnerability in ScriptMagix Photo Rating <= 2.0 via the 'viewcomments.php' file. It extracts admin credentials by injecting a UNION-based SQL query.
Description
SQL injection vulnerability in viewcomments.php in ScriptMagix Photo Rating 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the phid parameter.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by ajann · perlwebappsphp
https://www.exploit-db.com/exploits/3511
This Perl script exploits a blind SQL injection vulnerability in ScriptMagix Photo Rating <= 2.0 via the 'viewcomments.php' file. It extracts admin credentials by injecting a UNION-based SQL query.
Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:
ScriptMagix Photo Rating <= 2.0
No auth needed
Prerequisites:
Target must be running ScriptMagix Photo Rating <= 2.0 · The 'viewcomments.php' file must be accessible
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (6)
Core 6
Core References
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2007/1014
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/33061
Exploit, Third Party Advisory exploit
x_refsource_exploit-db
https://www.exploit-db.com/exploits/3511
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/23018
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24698
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/34629
Scores
EPSS
0.0122
EPSS Percentile
64.6%
Details
Status
published
Products (1)
scriptmagix/scriptmagix_photo_rating
< 2.0
Published
Mar 23, 2007
Tracked Since
Feb 18, 2026