CVE-2007-3127
IBM WebSphere Portal 1.0 - Information Disclosure via SQL Error in Page Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-3127. PoCs published by Jesper Jurcenoks.
AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in WSPortal 1.0 by injecting a UNION SELECT query to retrieve username and password from the users table. The attack leverages unsanitized input in the 'page' parameter.
Description
content.php in WSPortal 1.0, when magic_quotes_gpc is disabled, allows remote attackers to obtain sensitive information via a "';" (quote semicolon) sequence in the page parameter, which reveals the installation path in the resulting forced SQL error message.
Exploits (1)
This exploit demonstrates an SQL injection vulnerability in WSPortal 1.0 by injecting a UNION SELECT query to retrieve username and password from the users table. The attack leverages unsanitized input in the 'page' parameter.