CVE-2005-2466
OpenBook 1.2.2 - SQL Injection via Username or Password Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2005-2466. PoCs published by SVT.
AI-analyzed exploit summary This is a simple SQL injection proof-of-concept for OpenBook, exploiting unsanitized input in the login form to bypass authentication. The payload manipulates the SQL query to return a true condition, allowing unauthorized access.
Description
Multiple SQL injection vulnerabilities in the auth_user function in admin.php in OpenBook 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter.
Exploits (1)
This is a simple SQL injection proof-of-concept for OpenBook, exploiting unsanitized input in the login form to bypass authentication. The payload manipulates the SQL query to return a true condition, allowing unauthorized access.