CVE-2005-4168

eFiction 1.0, 1.1, 2.0 - SQL Injection via Let Parameter or Username

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-4168. PoCs published by [email protected].

AI-analyzed exploit summary This exploit demonstrates SQL injection and XSS vulnerabilities in eFiction. The payload injects a UNION-based SQL query to extract data from the 'fanfiction_authors' table and includes an XSS payload to steal cookies.

Description

Multiple SQL injection vulnerabilities in eFiction 1.0, 1.1, and 2.0 allow remote attackers to execute arbitrary SQL commands via (1) the let parameter in a viewlist action to titles.php and (2) the username.

Exploits (1)

exploitdb WORKING POC VERIFIED

by [email protected] · textwebappsphp

https://www.exploit-db.com/exploits/26592

View Code ZIP pw:eip

This exploit demonstrates SQL injection and XSS vulnerabilities in eFiction. The payload injects a UNION-based SQL query to extract data from the 'fanfiction_authors' table and includes an XSS payload to steal cookies.

Classification

Working Poc 90%

Attack Type

Sqli | Xss

Complexity

Trivial

Reliability

Reliable

Target: eFiction 1.0, 1.1, 2.0

No auth needed

Prerequisites: Access to the vulnerable eFiction web application

MITRE ATT&CK