CVE-2006-0583

Clever Copy <= 3.0 - SQL Injection via mailarticle.php ID Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-0583. PoCs published by rgod.

AI-analyzed exploit summary This PHP script exploits a SQL injection vulnerability in Clever Copy <= 3.0 to disclose admin authentication details. It crafts a malicious SQL query to extract usernames and password hashes from the admin table.

Description

SQL injection vulnerability in mailarticle.php in Clever Copy 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by rgod · phpwebappsphp

https://www.exploit-db.com/exploits/1468

View Code ZIP pw:eip

This PHP script exploits a SQL injection vulnerability in Clever Copy <= 3.0 to disclose admin authentication details. It crafts a malicious SQL query to extract usernames and password hashes from the admin table.

Classification

Working Poc 95%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: Clever Copy <= 3.0

No auth needed

Prerequisites: magic_quotes_gpc = Off · target path and host

MITRE ATT&CK