Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-1123. PoCs published by DevilBox.
AI-analyzed exploit summary This Perl script exploits a SQL injection vulnerability in D2KBLOG to extract administrator credentials by injecting a malicious SQL query via a cookie header. It uses LWP::UserAgent to send the request and parses the response to extract the username and password.
Description
SQL injection vulnerability in D2KBlog 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the memName parameter in a cookie.
Exploits (1)
This Perl script exploits a SQL injection vulnerability in D2KBLOG to extract administrator credentials by injecting a malicious SQL query via a cookie header. It uses LWP::UserAgent to send the request and parses the response to extract the username and password.