Exploitation Summary
EIP tracks 2 public exploits for CVE-2006-3221. PoCs published by RusH.
AI-analyzed exploit summary This exploit targets a SQL injection vulnerability in DataLife Engine, specifically in the 'userinfo' parameter. It brute-forces the password hash of a specified user by leveraging a time-based blind SQL injection technique.
Description
SQL injection vulnerability in index.php in DataLife Engine 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via double-encoded values in the user parameter in a userinfo subaction.
Exploits (2)
This exploit targets a SQL injection vulnerability in DataLife Engine, specifically in the 'userinfo' parameter. It brute-forces the password hash of a specified user by leveraging a time-based blind SQL injection technique.
This PHP script exploits a SQL injection vulnerability in Datalife Engine (DLE) <=4.1 to extract user password hashes via blind SQL injection. It automates the process by brute-forcing character ranges and checking responses.