Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-1333. PoCs published by nukedx.
AI-analyzed exploit summary This Perl script exploits a SQL injection vulnerability in BetaParticle Blog <= 6.0 by injecting a UNION-based query to extract admin credentials. It sends an HTTP request to a vulnerable endpoint and parses the response to display the username and password.
Description
Multiple SQL injection vulnerabilities in BetaParticle Blog 6.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to template_permalink.asp or (2) fldGalleryID parameter to template_gallery_detail.asp.
Exploits (1)
This Perl script exploits a SQL injection vulnerability in BetaParticle Blog <= 6.0 by injecting a UNION-based query to extract admin credentials. It sends an HTTP request to a vulnerable endpoint and parses the response to display the username and password.