Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-2855. PoCs published by SpC-x.
AI-analyzed exploit summary The provided text describes an SQL injection vulnerability in xueBook, where the 'start' parameter in index.php is not properly sanitized. It lacks actual exploit code, serving only as a vulnerability description.
Description
SQL injection vulnerability in index.php in xueBook 1.0 allows remote attackers to execute arbitrary SQL commands via the start parameter.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by SpC-x · textwebappsphp
https://www.exploit-db.com/exploits/27963
The provided text describes an SQL injection vulnerability in xueBook, where the 'start' parameter in index.php is not properly sanitized. It lacks actual exploit code, serving only as a vulnerability description.
Classification
Writeup 80%
Attack Type
Sqli
Complexity
Trivial
Reliability
Theoretical
Target:
xueBook (version not specified)
No auth needed
Prerequisites:
Access to the vulnerable application URL
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (5)
Core 5
Core References
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/18262
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/20511
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/27002
Exploit x_refsource_misc
http://downloads.securityfocus.com/vulnerabilities/exploits/xueBook_poc.txt
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2006/2212
Scores
EPSS
0.0111
EPSS Percentile
61.7%
Details
Status
published
Products (1)
xuebook/xuebook
1.0
Published
Jun 06, 2006
Tracked Since
Feb 18, 2026