Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-3324. PoCs published by rgod.
AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in MWChat, allowing an attacker to write a malicious PHP file to the server via the 'UNION SELECT ... INTO OUTFILE' technique. The payload executes arbitrary system commands via the 'cmd' GET parameter.
Description
SQL injection vulnerability in chat.php in MWChat 6.8 allows remote attackers to execute arbitrary SQL commands via the username parameter.
Exploits (1)
This exploit demonstrates an SQL injection vulnerability in MWChat, allowing an attacker to write a malicious PHP file to the server via the 'UNION SELECT ... INTO OUTFILE' technique. The payload executes arbitrary system commands via the 'cmd' GET parameter.