Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-3052. PoCs published by krasza.
AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in JPortal by injecting a UNION-based query to extract admin credentials (nick and pass) from the 'admins' table. The payload bypasses input sanitization by appending a single quote and comment to the original query.
Description
SQL injection vulnerability in module/down.inc.php in jportal 2.3.1 allows remote attackers to execute arbitrary SQL commands via the search field to download.php.
Exploits (1)
This exploit demonstrates an SQL injection vulnerability in JPortal by injecting a UNION-based query to extract admin credentials (nick and pass) from the 'admins' table. The payload bypasses input sanitization by appending a single quote and comment to the original query.