CVE-2006-0939
DCI-Taskeen 1.03 - SQL Injection via id or action Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-0939. PoCs published by Linux_Drox.
AI-analyzed exploit summary The provided text describes SQL injection vulnerabilities in DCI-Taskeen, detailing vulnerable parameters in the `cat.php` file. It includes example URLs demonstrating how unsanitized input can be exploited.
Description
SQL injection vulnerability in DCI-Taskeen 1.03 allows remote attackers to execute arbitrary SQL commands via the (1) id or (2) action parameter to (a) basket.php, or (3) id or (4) page parameter to (b) cat.php.
Exploits (2)
The provided text describes SQL injection vulnerabilities in DCI-Taskeen, detailing vulnerable parameters in the `cat.php` file. It includes example URLs demonstrating how unsanitized input can be exploited.
The provided text describes SQL injection vulnerabilities in DCI-Taskeen, specifically in the 'basket.php' file via the 'action' and 'id' parameters. It outlines the vulnerable endpoints but does not include executable exploit code.