Skip to main content
← All vulnerabilities
CVE-2007-2538

SQL injection vulnerability in class/debug/debug_show.php in RunCms 1.5.2 and earlier allows remote attackers to execute arbitrary SQL comma

Published
Last modified
published
Not listed in CISA KEV
1 on Exploit-DB

Summary

SQL injection vulnerability in class/debug/debug_show.php in RunCms 1.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the executed_queries array parameter.

Timeline

  1. Public exploit on Exploit-DB

    EDB-3850

  2. CVE published
  3. Record last updated

Affected versions

  • n/a n/a

    Version range not reported

References 10

vupen.com

Exploit-DB

securityfocus.com

securityreason.com

retrogod.altervista.org

secunia.com

runcms.org

exchange.xforce.ibmcloud.com

osvdb.org