Exploitation Summary
EIP tracks 2 public exploits for CVE-2005-1637. PoCs published by NoSP.
AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in NPDS via the 'thold' parameter in pollcomments.php. It allows an attacker to extract sensitive data such as usernames and passwords from the 'authors' or 'u' tables.
Description
Multiple SQL injection vulnerabilities in NPDS 4.8 and 5.0 allow remote attackers to execute arbitrary SQL commands via the thold parameter to (1) comments.php or (2) pollcomments.php.
Exploits (2)
This exploit demonstrates an SQL injection vulnerability in NPDS via the 'thold' parameter in pollcomments.php. It allows an attacker to extract sensitive data such as usernames and passwords from the 'authors' or 'u' tables.
This exploit demonstrates an SQL injection vulnerability in NPDS via the 'thold' parameter in comments.php. It allows an attacker to extract sensitive data such as usernames and passwords from the database.