CVE-2007-4918

Gelatocms - SQL Injection

Title source: rule
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-4918. PoCs published by s0cratex.

AI-analyzed exploit summary This PHP script exploits a SQL injection vulnerability in Gelato CMS by injecting a UNION-based query to extract user credentials (username and MD5 password hash) from the database. It interacts with the target via HTTP and parses the response to display the leaked data.

Description

SQL injection vulnerability in classes/gelato.class.php in Gelato allows remote attackers to execute arbitrary SQL commands via the post parameter to index.php.

Exploits (1)

exploitdb WORKING POC VERIFIED
by s0cratex · phpwebappsphp
https://www.exploit-db.com/exploits/4410

This PHP script exploits a SQL injection vulnerability in Gelato CMS by injecting a UNION-based query to extract user credentials (username and MD5 password hash) from the database. It interacts with the target via HTTP and parses the response to display the leaked data.

Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: Gelato CMS (version unspecified)
No auth needed
Prerequisites: Target must be running Gelato CMS with vulnerable SQL query handling · Network access to the target web server
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (8)

Core 8
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/26785
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/36617
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/25677
Exploit third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/3148
Exploit vdb-entry x_refsource_osvdb
http://osvdb.org/37087
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/479466/100/0/threaded
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3179
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/4410

Scores

EPSS 0.0162
EPSS Percentile 73.0%

Details

CWE
CWE-89
Status published
Products (3)
gelatocms/gelatocms _nil_
gelatocms/gelatocms 0.90
gelatocms/gelatocms 0.95
Published Sep 17, 2007
Tracked Since Feb 18, 2026