CVE-2007-1172

CVE-2007-1172 describes a SQL injection vulnerability in NukeSentinel 2.5.05 and potentially earlier versions, specifically within the nukesentinel.php script. This flaw allows remote attackers to execute arbitrary SQL commands by manipulating the Client-IP HTTP header, a method referred to as the "File Disclosure Exploit." With a CVSS score of 6.4 (Medium), this vulnerability is easily exploitable over the network with no authentication required, potentially leading to partial disclosure of information and data integrity compromise. While there is no evidence of active exploitation or Metasploit/Nuclei modules, an exploit is publicly available on ExploitDB, though community discussion and media coverage are minimal.