CVE-2007-5430
Stride CMS 1.0 - SQL Injection via p Parameter or id Parameter or course Parameter or provider Parameter
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2007-5430. PoCs published by durito.
AI-analyzed exploit summary The provided text describes SQL injection vulnerabilities in Stride 1.0 Courses, detailing vulnerable parameters in the 'detail.php' file. It lacks executable exploit code but provides technical details for manual exploitation.
Description
Multiple SQL injection vulnerabilities in Stride 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the p parameter to main.php in the Content Management System, (2) the id parameter in a sto cmd action to shop.php in the Merchant subsystem, or the (3) course or (4) provider parameter to detail.php in the Courses subsystem.
Exploits (3)
The provided text describes SQL injection vulnerabilities in Stride 1.0 Courses, detailing vulnerable parameters in the 'detail.php' file. It lacks executable exploit code but provides technical details for manual exploitation.
The provided text describes an SQL injection vulnerability in Scott Manktelow Design Stride 1.0 Merchant, where the 'id' parameter in the 'shop.php' script is not properly sanitized. This allows attackers to manipulate SQL queries, potentially compromising the application or database.
The provided text describes an SQL injection vulnerability in Scott Manktelow Design Stride 1.0 CMS, where the 'p' parameter in main.php is not properly sanitized. No actual exploit code is included, only a description and a sample URL for exploitation.