Exploitation Summary
EIP tracks 2 public exploits for CVE-2004-1843. PoCs published by Manuel Lopez.
AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in Member Management System version 2.1, specifically in the 'ID' parameter of 'resend.asp' and 'news_view.asp' scripts. It lacks executable exploit code but provides a URL example for potential exploitation.
Description
SQL injection vulnerability in Member Management System 2.1 allows remote attackers to execute arbitrary SQL via the ID parameter to (1) resend.asp or (2) news_view.asp.
Exploits (2)
The provided text describes a SQL injection vulnerability in Member Management System version 2.1, specifically in the 'ID' parameter of 'resend.asp' and 'news_view.asp' scripts. It lacks executable exploit code but provides a URL example for potential exploitation.
The writeup describes a SQL injection vulnerability in Member Management System 2.1, where the 'ID' parameter in 'resend.asp' and 'news_view.asp' scripts is vulnerable to malicious SQL syntax injection. No exploit code is provided, only a description and example URL.