Description
SQL injection vulnerability in SearchResults.asp in ImageRacer 1.0, when WordSearchCrit is enabled, allows remote attackers to execute arbitrary SQL commands via the SearchWord parameter.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by Aria-Security Team · textwebappsasp
https://www.exploit-db.com/exploits/30332
References (7)
Core 7
Core References
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/26169
Exploit x_refsource_misc
http://outlaw.aria-security.info/?p=7
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/36277
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/474419/100/0/threaded
Third Party Advisory third-party-advisory
x_refsource_sreason
http://securityreason.com/securityalert/2925
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/35537
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/25010
Scores
EPSS
0.0096
EPSS Percentile
76.6%
Details
Status
published
Products (1)
junction_quest/image_racer
1.0
Published
Jul 25, 2007
Tracked Since
Feb 18, 2026