CVE-2006-0249
BitDamaged geoBlog MOD_1.0 - SQL Injection via viewcat.php cat Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-0249. PoCs published by Aliaksandr Hartsuyeu.
AI-analyzed exploit summary The exploit demonstrates an SQL injection vulnerability in geoBlog by injecting a UNION-based payload into the 'cat' parameter of viewcat.php. This allows an attacker to manipulate SQL queries and potentially extract data from the database.
Description
SQL injection vulnerability in viewcat.php in BitDamaged geoBlog MOD_1.0 allows remote attackers to execute arbitrary SQL commands, then steal credentials and upload files, via the cat parameter ($tmpCategory variable).
Exploits (1)
The exploit demonstrates an SQL injection vulnerability in geoBlog by injecting a UNION-based payload into the 'cat' parameter of viewcat.php. This allows an attacker to manipulate SQL queries and potentially extract data from the database.