Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-4552.
AI-analyzed exploit summary The document describes a Remote File Inclusion (RFI) and SQL Injection vulnerability in Arcadem 2.01. It provides proof-of-concept examples for both vulnerabilities, including URL-encoded payloads for SQLi and path traversal for RFI.
Description
SQL injection vulnerability in index.php in Agares Media Arcadem 2.01 allows remote attackers to execute arbitrary SQL commands via the blockpage parameter. NOTE: as of 20070827, the vendor has made conflicting statements regarding whether this issue exists or not.
Exploits (1)
The document describes a Remote File Inclusion (RFI) and SQL Injection vulnerability in Arcadem 2.01. It provides proof-of-concept examples for both vulnerabilities, including URL-encoded payloads for SQLi and path traversal for RFI.