CVE-2007-3987

ImageRacer 1.0 - SQL Injection via SearchWord Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-3987. PoCs published by Aria-Security Team.

AI-analyzed exploit summary The provided text describes an SQL injection vulnerability in Image Racer 1.0, where the 'SearchWord' parameter in 'SearchResults.asp' is not properly sanitized. This allows attackers to inject arbitrary SQL commands.

Description

SQL injection vulnerability in SearchResults.asp in ImageRacer 1.0, when WordSearchCrit is enabled, allows remote attackers to execute arbitrary SQL commands via the SearchWord parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Aria-Security Team · textwebappsasp

https://www.exploit-db.com/exploits/30332

View Code ZIP pw:eip

The provided text describes an SQL injection vulnerability in Image Racer 1.0, where the 'SearchWord' parameter in 'SearchResults.asp' is not properly sanitized. This allows attackers to inject arbitrary SQL commands.

Classification

Writeup 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: Image Racer 1.0

No auth needed

Prerequisites: Access to the vulnerable web application

MITRE ATT&CK