Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-0318. PoCs published by Aliaksandr Hartsuyeu.
AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in BlogPHP by injecting a malicious payload into the username field during login, bypassing authentication. The payload manipulates the SQL query to return true, allowing unauthorized access.
Description
SQL injection vulnerability in index.php in BlogPHP 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username parameter in a login action.
Exploits (1)
This exploit demonstrates an SQL injection vulnerability in BlogPHP by injecting a malicious payload into the username field during login, bypassing authentication. The payload manipulates the SQL query to return true, allowing unauthorized access.