CVE-2007-1634
Net Portal Dynamic System < 5.10 - SQL Injection via _FILES[DB][tmp_name] Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-1634.
AI-analyzed exploit summary This exploit demonstrates a multi-stage attack against Net Portal Dynamic System (NPDS) <= 5.10, leveraging SQL injection to extract admin credentials and then abusing a configuration save feature to achieve remote code execution via PHP eval injection.
Description
Variable extraction vulnerability in grab_globals.php in Net Portal Dynamic System (NPDS) 5.10 and earlier allows remote attackers to conduct SQL injection attacks via the _FILES[DB][tmp_name] parameter to print.php, which overwrites the $DB variable with dynamic variable evaluation.
Exploits (1)
This exploit demonstrates a multi-stage attack against Net Portal Dynamic System (NPDS) <= 5.10, leveraging SQL injection to extract admin credentials and then abusing a configuration save feature to achieve remote code execution via PHP eval injection.