Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-4792.
AI-analyzed exploit summary This Perl script exploits a SQL injection vulnerability in phpWebSite by injecting a UNION-based query to extract user credentials (username and password hash) from the database. It targets the 'module' parameter in index.php and retrieves the hash for a specified username.
Description
SQL injection vulnerability in index.php in Appalachian State University phpWebSite 0.10.1 and earlier allows remote attackers to execute arbitrary SQL commands via the module parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploits (1)
This Perl script exploits a SQL injection vulnerability in phpWebSite by injecting a UNION-based query to extract user credentials (username and password hash) from the database. It targets the 'module' parameter in index.php and retrieves the hash for a specified username.