Exploitation Summary
EIP tracks 3 public exploits for CVE-2004-2201. PoCs published by Soroosh Dalili.
AI-analyzed exploit summary The provided text describes multiple vulnerabilities in DUclassmate, DUclassified, and DUforum, including SQL injection and HTML injection. It includes a basic SQL injection example for authentication bypass.
Description
SQL injection vulnerability in DUware DUforum 3.0 through 3.1 allows remote attackers to execute arbitrary SQL commands via the FOR_ID parameter in messages.asp, (2) MSG_ID parameter in messageDetail.asp, or (3) password parameter in the login form.
Exploits (3)
The provided text describes multiple vulnerabilities in DUclassmate, DUclassified, and DUforum, including SQL injection and HTML injection. It includes a basic SQL injection example for authentication bypass.
The provided text describes multiple vulnerabilities in DUclassmate, DUclassified, and DUforum, including SQL injection and HTML injection. It includes an example SQL injection payload but lacks executable exploit code.
The provided text is a vulnerability writeup describing SQL injection and HTML injection vulnerabilities in DUclassmate, DUclassified, and DUforum. It includes an example SQL injection payload but lacks executable exploit code.