Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-4049. PoCs published by r0t3d3Vil.
AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in Blog System, where the 'cat' parameter in the URL is not properly sanitized, allowing attackers to inject arbitrary SQL code. The example URL demonstrates the vulnerability but does not include executable exploit code.
Description
Multiple SQL injection vulnerabilities in Blog System 1.2 allow remote attackers to execute arbitrary SQL commands via (1) the cat parameter in index.php and (2) the note parameter in blog.php.
Exploits (1)
The provided text describes a SQL injection vulnerability in Blog System, where the 'cat' parameter in the URL is not properly sanitized, allowing attackers to inject arbitrary SQL code. The example URL demonstrates the vulnerability but does not include executable exploit code.