Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-3960. PoCs published by SirDarckCat.
AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in X-Poll 1.10, allowing an attacker to write a malicious PHP file to the server via the 'INTO OUTFILE' clause. The payload includes a PHP system command execution wrapper, enabling remote code execution (RCE).
Description
SQL injection vulnerability in top.php in X-Scripts X-Poll, probably 2.30, allows remote attackers to execute arbitrary SQL commands via the poll parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Exploits (1)
This exploit demonstrates an SQL injection vulnerability in X-Poll 1.10, allowing an attacker to write a malicious PHP file to the server via the 'INTO OUTFILE' clause. The payload includes a PHP system command execution wrapper, enabling remote code execution (RCE).