SQL Injection Vulnerability in Ace Image Hosting Script
CVE-2007-6393

Currently unrated

Key Information:

Vendor: Ace Image Hosting Script
Status: Ace Image Hosting Script
Vendor: CVE Published:; 17 December 2007

🔔 Create Ace Image Hosting Script Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2007-6393?

An SQL injection vulnerability exists in the albums.php file of the Ace Image Hosting Script. This flaw enables remote authenticated users to manipulate the database by executing arbitrary SQL commands through the 'id' parameter in editalbum mode. Exploitation of this vulnerability can lead to unauthorized access to sensitive data and potential compromise of the hosting environment.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2007-6393 - Proof of Concept

References

http://secunia.com/advisories/27988

third-party-advisoryx_refsource_SECUNIA

http://www.securityfocus.com/bid/26780

vdb-entryx_refsource_BID

https://exchange.xforce.ibmcloud.com/vulnerabilities/38941

vdb-entryx_refsource_XF

Download the Critical Vulnerability Management Cheat Sheet

Timeline

🟡
Public PoC available
Dec 17, 2007
👾
Exploit known to exist
Dec 17, 2007
Vulnerability published
Dec 17, 2007
Vulnerability Reserved
Dec 17, 2007

CVE-2007-6393 Data

JSON