CVE-2005-1804
Net Portal Dynamic System 5.0 - SQL Injection via Glossaire Module or Links Query Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2005-1804. PoCs published by NoSP.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in NPDS by injecting a malicious query into the 'terme' parameter, allowing an attacker to extract usernames and passwords from the 'users' table. The vulnerability arises due to insufficient input validation in the 'glossaire' module.
Description
Multiple SQL injection vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to execute arbitrary SQL commands via the (1) terme parameter in the glossaire module (glossaire.php) or (2) query parameter to links.php.
Exploits (2)
This exploit demonstrates a SQL injection vulnerability in NPDS by injecting a malicious query into the 'terme' parameter, allowing an attacker to extract usernames and passwords from the 'users' table. The vulnerability arises due to insufficient input validation in the 'glossaire' module.
This exploit demonstrates a SQL injection vulnerability in NPDS, allowing an attacker to extract user credentials (uname, pass) from the database and write them to a file on the server. The attack leverages a UNION-based SQL injection with INTO OUTFILE to exfiltrate data.