CVE-2006-1334
Maian Weblog 2.0 - SQL Injection via Entry or Email Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-1334. PoCs published by Aliaksandr Hartsuyeu.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Maian Weblog by injecting arbitrary SQL logic via the 'entry' parameter in the print.php script. The payload uses a UNION-based attack to extract data from the database.
Description
Multiple SQL injection vulnerabilities in Maian Weblog 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) entry and (2) email parameters to (a) print.php and (b) mail.php.
Exploits (2)
This exploit demonstrates a SQL injection vulnerability in Maian Weblog by injecting arbitrary SQL logic via the 'entry' parameter in the print.php script. The payload uses a UNION-based attack to extract data from the database.
This exploit demonstrates a SQL injection vulnerability in Maian Weblog by injecting arbitrary SQL logic into the 'email' parameter of the 'mail.php' script. The attack bypasses authentication and manipulates the database query to potentially access or modify sensitive information.