Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-3864. PoCs published by r0t.
AI-analyzed exploit summary The exploit demonstrates an SQL injection vulnerability in BerliOS SourceWell by injecting malicious SQL queries via the 'cnt' parameter in the URL. This can lead to unauthorized data disclosure or manipulation.
Description
SQL injection vulnerability in index.php in SourceWell 1.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the cnt parameter. NOTE: various reports indicate that the affected version is 1.1.3, but as of 2005-11-29, the most recent version appears to be 1.1.2.
Exploits (1)
The exploit demonstrates an SQL injection vulnerability in BerliOS SourceWell by injecting malicious SQL queries via the 'cnt' parameter in the URL. This can lead to unauthorized data disclosure or manipulation.