Exploitation Summary
EIP tracks 2 public exploits for CVE-2006-2214. PoCs published by CrAzY.CrAcKeR.
AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in 4Images, where the 'sessionid' parameter in 'top.php' is not properly sanitized. It lacks actual exploit code but references the vulnerability and its potential impact.
Description
Multiple SQL injection vulnerabilities in 4images 1.7.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sessionid parameter in (1) top.php and (2) member.php. NOTE: this issue has also been reported to affect 1.7.2.
Exploits (2)
The provided text describes a SQL injection vulnerability in 4Images, where the 'sessionid' parameter in 'top.php' is not properly sanitized. It lacks actual exploit code but references the vulnerability and its potential impact.
The provided text describes a SQL injection vulnerability in 4Images, where the 'sessionid' parameter in the 'member.php' file is not properly sanitized. This allows attackers to manipulate SQL queries, potentially compromising the application or underlying database.