Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-4857. PoCs published by ajann.
AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in ClickBlog! 2.0 and earlier versions. The provided credentials bypass authentication by injecting SQL conditions into the login fields.
Description
SQL injection vulnerability in default.asp (aka the login page) in ClickTech ClickBlog 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) form_codeword (aka the Password field) parameters.
Exploits (1)
This exploit demonstrates an SQL injection vulnerability in ClickBlog! 2.0 and earlier versions. The provided credentials bypass authentication by injecting SQL conditions into the login fields.