CVE-2006-4284
LBlog <= 1.05 - SQL Injection via comments.asp id Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-4284. PoCs published by Chironex Fleckeri.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in LBlog's comments.asp page, allowing an attacker to extract admin credentials via a UNION-based SQLi attack. The PoC provides a direct URL manipulation example to dump the username and password from the LOGIN table.
Description
SQL injection vulnerability in comments.asp in LBlog 1.05 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in LBlog's comments.asp page, allowing an attacker to extract admin credentials via a UNION-based SQLi attack. The PoC provides a direct URL manipulation example to dump the username and password from the LOGIN table.