cve/cves/2007/CVE-2007-3127.md at main

admin/cve

0 Fork 0

mirror of https://github.com/0xMarcio/cve.git synced 2026-10-27 16:51:03 +00:00

Files

T

0xMarcio 81017c9871 Expand CVE PoC coverage and metadata

2026-09-01 19:01:07 +02:00

755 B

Raw Permalink Blame History

CVE-2007-3127

Description

content.php in WSPortal 1.0, when magic_quotes_gpc is disabled, allows remote attackers to obtain sensitive information via a "';" (quote semicolon) sequence in the page parameter, which reveals the installation path in the resulting forced SQL error message.

POC

Reference

No PoCs from references.

Github

No PoCs found on GitHub currently.

ExploitDB

https://www.exploit-db.com/exploits/30197

755 B Raw Permalink Blame History