Exploitation Summary
EIP tracks 2 public exploits for CVE-2005-3363. PoCs published by SnIpEr_SA, almaster.
AI-analyzed exploit summary This exploit leverages a SQL injection vulnerability in SaphpLesson 2.0 to extract administrator usernames and password hashes from the 'modretor' table via crafted UNION-based queries.
Description
SQL injection vulnerability in Saphp Lesson, possibly saphp Lesson1.1 and saphpLesson2.0, allows remote attackers to execute arbitrary SQL commands via the forumid parameter in (1) showcat.php and (2) add.php.
Exploits (2)
This exploit leverages a SQL injection vulnerability in SaphpLesson 2.0 to extract administrator usernames and password hashes from the 'modretor' table via crafted UNION-based queries.
The provided text describes a SQL injection vulnerability in saphp Lesson, where the 'forumid' parameter in 'add.php' is not properly sanitized. The example URL demonstrates a basic SQL injection attempt but lacks executable exploit code.