Exploitation Summary
EIP tracks 1 public exploit for CVE-2002-0539. PoCs published by pokleyzz sakamaniaka.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Demarc PureSecure by manipulating the 's_key' cookie to bypass authentication. The crafted curl command injects SQL to match any session ID, potentially granting administrative access.
Description
Demarc PureSecure 1.05 allows remote attackers to gain administrative privileges via a SQL injection attack in a session ID that is stored in the s_key cookie.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in Demarc PureSecure by manipulating the 's_key' cookie to bypass authentication. The crafted curl command injects SQL to match any session ID, potentially granting administrative access.