Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-2826.
AI-analyzed exploit summary The writeup details a SQL injection vulnerability in PHPLib's session handling code, which can lead to remote code execution via crafted session IDs. It includes technical analysis of the vulnerable function and a proof-of-concept HTTP request demonstrating the exploit.
Description
SQL injection vulnerability in sessions.inc in PHP Base Library (PHPLib) before 7.4a allows remote attackers to execute arbitrary SQL commands via the id variable, which is set by a client through a query string or a cookie.
Exploits (1)
The writeup details a SQL injection vulnerability in PHPLib's session handling code, which can lead to remote code execution via crafted session IDs. It includes technical analysis of the vulnerable function and a proof-of-concept HTTP request demonstrating the exploit.