SQL Injection Vulnerability in AJDating 1.0
CVE-2007-1297
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2007-1297?
An SQL injection vulnerability exists in the view_profile.php file of AJDating 1.0, which permits remote attackers to inject and execute arbitrary SQL commands by exploiting the user_id parameter. This flaw could potentially compromise the security of the affected application, allowing unauthorized access to sensitive data or enabling further attacks on the underlying database.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.