Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-0088. PoCs published by Aliaksandr Hartsuyeu.
AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in inTouch by providing a malicious username input that bypasses authentication. The payload manipulates the SQL query to return true, allowing login with any password.
Description
SQL injection vulnerability in intouch.lib.php in inTouch 0.5.1 Alpha allows remote attackers to execute arbitrary SQL commands via the user parameter.
Exploits (1)
This exploit demonstrates an SQL injection vulnerability in inTouch by providing a malicious username input that bypasses authentication. The payload manipulates the SQL query to return true, allowing login with any password.