CVE-2006-0943
PwsPHP 1.2.3 - SQL Injection via Sondages Module id Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-0943. PoCs published by papipsycho.
AI-analyzed exploit summary This Perl script exploits a SQL injection vulnerability in PwsPHP <= 1.2.4 by injecting a UNION-based query to extract usernames and password hashes from the 'users' table. The exploit constructs a malicious URL and parses the response to display credentials.
Description
SQL injection vulnerability in the sondages module in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.
Exploits (1)
This Perl script exploits a SQL injection vulnerability in PwsPHP <= 1.2.4 by injecting a UNION-based query to extract usernames and password hashes from the 'users' table. The exploit constructs a malicious URL and parses the response to display credentials.