CVE-2006-0209
TankLogger 2.4 - SQL Injection via livestock_id or tank_id Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-0209. PoCs published by Aliaksandr Hartsuyeu.
AI-analyzed exploit summary The exploit demonstrates a SQL injection vulnerability in TankLogger by injecting a UNION-based payload into the 'livestock_id' parameter. This allows an attacker to extract data from the database by manipulating the SQL query.
Description
SQL injection vulnerability in general_functions.php in TankLogger 2.4 allows remote attackers to execute arbitrary SQL commands via the (1) livestock_id parameter to showInfo.php and (2) tank_id parameter, possibly to livestock.php.
Exploits (1)
The exploit demonstrates a SQL injection vulnerability in TankLogger by injecting a UNION-based payload into the 'livestock_id' parameter. This allows an attacker to extract data from the database by manipulating the SQL query.