CVE-2007-3293

LiveCMS <= 3.4 - SQL Injection via Categoria.php cid Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-3293. PoCs published by g00ns.

AI-analyzed exploit summary This Perl script exploits a SQL injection vulnerability in LiveCMS <= 3.4 via the 'cid' parameter in categoria.php. It retrieves admin credentials (username and password hash) and attempts to crack the hash using an external service.

Description

SQL injection vulnerability in categoria.php in LiveCMS 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by g00ns · perlwebappsphp

https://www.exploit-db.com/exploits/4082

View Code ZIP pw:eip

This Perl script exploits a SQL injection vulnerability in LiveCMS <= 3.4 via the 'cid' parameter in categoria.php. It retrieves admin credentials (username and password hash) and attempts to crack the hash using an external service.

Classification

Working Poc 95%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: LiveCMS <= 3.4

No auth needed

Prerequisites: Target running LiveCMS <= 3.4 · Network access to the target

MITRE ATT&CK