Exploitation Summary
EIP tracks 6 public exploits for CVE-2005-4243. PoCs published by r0t.
AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in QuickPayPro's tracking.details.php due to improper input sanitization. It includes a basic example URL demonstrating the vulnerability but lacks executable exploit code.
Description
Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via the (1) popupid parameter in popups.edit.php; (2) so, (3) sb, and (4) nr parameters in customer.tickets.view.php; (5) subrackingid parameter in subscribers.tracking.edit.php; (6) delete parameter in design.php; (7) trackingid parameter in tracking.details.php; and (8) customerid parameter in sales.view.php.
Exploits (6)
The provided text describes a SQL injection vulnerability in QuickPayPro's tracking.details.php due to improper input sanitization. It includes a basic example URL demonstrating the vulnerability but lacks executable exploit code.
The provided text describes a SQL injection vulnerability in QuickPayPro, specifically in the 'subscribers.tracking.edit.php' endpoint via the 'subtrackingid' parameter. It lacks executable exploit code but outlines the vulnerability and potential impact.
The provided text describes a SQL injection vulnerability in QuickPayPro due to improper input sanitization. It includes a sample URL demonstrating the vulnerability but lacks executable exploit code.
The provided text describes a SQL injection vulnerability in QuickPayPro's popups.edit.php due to improper input sanitization. It outlines potential impacts but lacks actual exploit code or technical details.
The provided text describes a SQL injection vulnerability in QuickPayPro due to improper input sanitization. It includes a sample URL demonstrating the vulnerability but lacks executable exploit code.
The provided text describes SQL injection vulnerabilities in QuickPayPro due to improper input sanitization. It includes example URLs demonstrating the vulnerable parameters but does not contain executable exploit code.