CVE-2006-4300
SimpleBlog < 2.0 - SQL Injection via comments.asp id Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-4300. PoCs published by ASIANEAGLE, Chironex Fleckeri.
AI-analyzed exploit summary This exploit targets a SQL injection vulnerability in SimpleBlog 2.0 via the 'id' parameter in comments.asp. It extracts admin credentials (username, password, email) by injecting a UNION-based SQL query.
Description
SQL injection vulnerability in comments.asp in SimpleBlog 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Exploits (2)
This exploit targets a SQL injection vulnerability in SimpleBlog 2.0 via the 'id' parameter in comments.asp. It extracts admin credentials (username, password, email) by injecting a UNION-based SQL query.
This exploit demonstrates a SQL injection vulnerability in SimpleBlog 2.0 via the 'comments.asp' page. It allows an attacker to extract user credentials from the database by manipulating the 'id' parameter in a UNION-based SQL injection attack.