CVE-2006-4872

Keyvan1 ECardPro 2.0 - SQL Injection via search.asp Keyword Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-4872. PoCs published by ajann.

AI-analyzed exploit summary The provided text describes an SQL injection vulnerability in ECardPro 2.0, where unsanitized user input in the 'keyword' parameter of search.asp can be exploited to manipulate SQL queries. No actual exploit code is present, only a description and example URL.

Description

SQL injection vulnerability in search.asp in Keyvan1 (aka Keyvan Janghorbani) ECardPro 2.0 allows remote attackers to execute arbitrary SQL commands via the keyword parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED

by ajann · textwebappsasp

https://www.exploit-db.com/exploits/28597

View Code ZIP pw:eip

The provided text describes an SQL injection vulnerability in ECardPro 2.0, where unsanitized user input in the 'keyword' parameter of search.asp can be exploited to manipulate SQL queries. No actual exploit code is present, only a description and example URL.

Classification

Writeup 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Theoretical

Target: ECardPro 2.0

No auth needed

Prerequisites: Access to the vulnerable search.asp endpoint

MITRE ATT&CK