Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-0066. PoCs published by Aliaksandr Hartsuyeu.
AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in PHPjournaler by injecting a UNION-based query to extract user credentials from the 'Users' table. The attack leverages unsanitized input in the 'readold' parameter to manipulate the SQL query.
Description
SQL injection vulnerability in index.php in PHPjournaler 1.0 allows remote attackers to execute arbitrary SQL commands via the readold parameter.
Exploits (1)
This exploit demonstrates an SQL injection vulnerability in PHPjournaler by injecting a UNION-based query to extract user credentials from the 'Users' table. The attack leverages unsanitized input in the 'readold' parameter to manipulate the SQL query.