CVE-2007-3065

Particle Soft Particle Gallery <= 1.0.1 - SQL Injection via viewimage.php editcomment Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-3065. PoCs published by Silentz.

AI-analyzed exploit summary This exploit targets a SQL injection vulnerability in Particle Gallery <= 1.0.1 via the 'editcomment' parameter in viewimage.php. It automates user registration, login, and SQLi payload execution to dump user credentials.

Description

SQL injection vulnerability in viewimage.php in Particle Soft Particle Gallery 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the editcomment parameter, a different version and vector than CVE-2006-2862.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Silentz · phpwebappsphp

https://www.exploit-db.com/exploits/4019

View Code ZIP pw:eip

This exploit targets a SQL injection vulnerability in Particle Gallery <= 1.0.1 via the 'editcomment' parameter in viewimage.php. It automates user registration, login, and SQLi payload execution to dump user credentials.

Classification

Working Poc 95%

Attack Type

Sqli

Complexity

Moderate

Reliability

Reliable

Target: Particle Gallery <= 1.0.1

Auth required

Prerequisites: Target must have Particle Gallery <= 1.0.1 installed · Registration must be enabled or a valid account must exist

MITRE ATT&CK