CVE-2007-6393 EXPLOIT
6.5
MEDIUM · CVSS 2.0 · EPSS 0.9% (pctl 59)
Patch early
A public exploit exists.
Description
SQL injection vulnerability in albums.php in Ace Image Hosting Script allows remote authenticated users to execute arbitrary SQL commands via the id parameter in editalbum mode.
Scoring
| CVSS | 6.5 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:S/C:P/I:P/A:P |
| EPSS | 0.9% — more likely to be exploited than 59% of all CVEs |
| Weakness | CWE-89 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2007-12-17 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| ace image hosting script | ace image hosting script |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Ace Image Hosting Script - 'id' SQL Injection | 2007-12-09 |
References
- http://secunia.com/advisories/27988
- http://www.securityfocus.com/bid/26780
- http://www.vupen.com/english/advisories/2007/4176
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38941
- https://www.exploit-db.com/exploits/4707
- http://secunia.com/advisories/27988
- http://www.securityfocus.com/bid/26780
- http://www.vupen.com/english/advisories/2007/4176
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38941
- https://www.exploit-db.com/exploits/4707
→ the Explorer · watch your stack · NVD