Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-2858. PoCs published by ajann.
AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in LocazoList Classifieds by injecting a UNION-based query to extract sensitive data (email and password) from the database. The attack leverages unsanitized input in the 'msgid' parameter.
Description
SQL injection vulnerability in viewmsg.asp in LocazoList Classifieds 1.05e allows remote attackers to execute arbitrary SQL commands via the msgid parameter.
Exploits (1)
This exploit demonstrates an SQL injection vulnerability in LocazoList Classifieds by injecting a UNION-based query to extract sensitive data (email and password) from the database. The attack leverages unsanitized input in the 'msgid' parameter.