Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-0775. PoCs published by Aliaksandr Hartsuyeu.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in BirthSys, allowing an attacker to bypass authentication by injecting a UNION-based SQL query. The provided URL manipulates the 'month' parameter to extract arbitrary data from the database.
Description
Multiple SQL injection vulnerabilities in show.php in BirthSys 3.1 allow remote attackers to execute arbitrary SQL commands via the $month variable. NOTE: a vector regarding the $date parameter and data.php (date.php) was originally reported, but this appears to be in error.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in BirthSys, allowing an attacker to bypass authentication by injecting a UNION-based SQL query. The provided URL manipulates the 'month' parameter to extract arbitrary data from the database.