header-logo
Suggest Exploit
vendor:
PHP Designer 2007
by:
SecurityFocus
8,8
CVSS
HIGH
SQL-injection
89
CWE
Product Name: PHP Designer 2007
Affected Version From: PHP Designer 2007 - Personal
Affected Version To: PHP Designer 2007 - Personal
Patch Exists: YES
Related CWE: N/A
CPE: a:mps:php_designer_2007:2007
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2012

PHP Designer 2007 – Personal Multiple SQL-injection Vulnerabilities

PHP Designer 2007 - Personal is prone to multiple SQL-injection vulnerabilities. A successful exploit will allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Mitigation:

Input validation should be used to prevent SQL-injection attacks.
Source

Exploit-DB raw data:

source:  https://www.securityfocus.com/bid/52819/info

PHP Designer 2007 - Personal is prone multiple SQL-injection vulnerabilities.

A successful exploit will allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/read_news.php?news_id=[Sqli]
http://www.example.com/announce.php?id=[Sqli]