Exploitation Summary
EIP tracks 2 public exploits for CVE-2006-1422. PoCs published by Stack, undefined1_.
AI-analyzed exploit summary This exploit targets a SQL injection vulnerability in PHP Booking Calendar 10d/10e, extracting admin credentials (username and password hash) via a crafted UNION-based SQL query. It uses LWP::UserAgent to send the malicious request and parse the response.
Description
SQL injection vulnerability in details_view.php in PHP Booking Calendar 1.0c and earlier allows remote attackers to execute arbitrary SQL commands via the event_id parameter.
Exploits (2)
This exploit targets a SQL injection vulnerability in PHP Booking Calendar 10d/10e, extracting admin credentials (username and password hash) via a crafted UNION-based SQL query. It uses LWP::UserAgent to send the malicious request and parse the response.
This exploit demonstrates a SQL injection vulnerability in phpBookingCalendar <= 1.0c, allowing an attacker to extract sensitive user credentials (username and password) from the database via a crafted UNION-based SQL query.