CVE-2006-4876
Jupiter CMS - SQL Injection via Login Username or Registration Parameters
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-4876. PoCs published by HACKERS PAL.
AI-analyzed exploit summary This exploit demonstrates SQL injection and authentication bypass vulnerabilities in Jupiter CMSA. It allows an attacker to reset passwords for any user, including administrators, by manipulating input parameters and leveraging union-based SQL injection.
Description
Multiple SQL injection vulnerabilities in Jupiter CMS allow remote attackers to execute arbitrary SQL commands via (1) the user name during login, or the (2) key or (3) fpwusername parameters in modules/register.
Exploits (1)
This exploit demonstrates SQL injection and authentication bypass vulnerabilities in Jupiter CMSA. It allows an attacker to reset passwords for any user, including administrators, by manipulating input parameters and leveraging union-based SQL injection.