Oxygen<=1.x.x SQL injection

2006.04.01
Credit: DaBDouB-MoSiKaR
Risk: Medium
Local: No
Remote: Yes
CVE: CVE-2006-1572
CWE: CWE-89


CVSS Base Score: 5/10
Impact Subscore: 2.9/10
Exploitability Subscore: 10/10
Exploit range: Remote
Attack complexity: Low
Authentication: No required
Confidentiality impact: None
Integrity impact: Partial
Availability impact: None

author: DaBDouB-MoSiKaR [Moroccan Security Team] site: www.o2php.com greetz to : [Moroccan Security Team] CiM-TeaM and All Freinds Solution: intval() exemple: http://[target]/post.php?action=newthread&fid=[sql] inbox:DaBDouB-MoSiKaR[at]moroccan-security[dot]com


See this note in RAW Version
Vote for this issue:
50%
50%

Comment it here.
Copyright 2025, cxsecurity.com

 

Back to Top