Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-3696. PoCs published by Devil-00.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in ArkiDB, allowing an attacker to extract username and password information from the database via a crafted UNION SELECT query. The vulnerability is due to improper input validation of the 'catid' parameter.
Description
SQL injection vulnerability in Arki-DB 1.0 and 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a view action (view.php) to index.php.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in ArkiDB, allowing an attacker to extract username and password information from the database via a crafted UNION SELECT query. The vulnerability is due to improper input validation of the 'catid' parameter.