CVE-2007-6557 Multiple SQL injection vulnerabilities in MeGaCheatZ 1.1 allow remote attackers to execute arbitrary SQL commands via the ItemID parameter to (1) comments.php, (2) view.php, (3) siteadmin/ViewItem.php...

HighCVSS 7.5 EPSS 2.3%

Published: 2007-12-28 14:50 (approximate time: when CVE Radar first recorded it)
Updated: 2026-06-17 01:48
Exploit status: No public exploit known

Description

Multiple SQL injection vulnerabilities in MeGaCheatZ 1.1 allow remote attackers to execute arbitrary SQL commands via the ItemID parameter to (1) comments.php, (2) view.php, (3) siteadmin/ViewItem.php, and unspecified other vectors.

Affected products

Product	Affected versions	Fixed in
megacheatz	= 1.1	No fix listed

References

40024 vdb-entry
40025 vdb-entry
40026 vdb-entry
www.inj3ct-it.org exploit
26999 exploit vdb-entry
4778 exploit

CVSS v2.0

7.5 High

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 2.25% (percentile 83.2)
CWE: CWE-89

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

MeGaCheatZ 1.1 - Multiple SQL Injections Exploit · Exploit Database (OffSec) · 2007-12-24