CVE-2006-4524
Digiappz Freekot 1.01 - SQL Injection via Login or Password Parameters
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-4524. PoCs published by R3d-D3V!L, FarhadKey.
AI-analyzed exploit summary This exploit demonstrates a simple SQL injection vulnerability in the login mechanism of the 'freekot' software by DigiAppz. The payload bypasses authentication by injecting a tautology into the SQL query.
Description
Multiple SQL injection vulnerabilities in login_verif.asp in Digiappz Freekot 1.01 allow remote attackers to execute arbitrary SQL commands via the (1) login or (2) password parameters. NOTE: some of these details are obtained from third party information.
Exploits (2)
This exploit demonstrates a simple SQL injection vulnerability in the login mechanism of the 'freekot' software by DigiAppz. The payload bypasses authentication by injecting a tautology into the SQL query.
This is a working proof-of-concept for an SQL injection vulnerability in Digiappz Freekot. It exploits insufficient input sanitization in the login mechanism to bypass authentication by injecting SQL conditions into the login and password fields.