Exploitation Summary
EIP tracks 4 public exploits for CVE-2006-5107. PoCs published by HACKERS PAL.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in CubeCart's view_order.php by injecting a UNION SELECT statement to extract data from the database. The attack leverages improper input sanitization to manipulate the SQL query.
Description
Multiple SQL injection vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to execute arbitrary SQL commands via (1) the user_name parameter in admin/forgot_pass.php, (2) the order_id parameter in view_order.php, (3) the view_doc parameter in view_doc.php, and (4) the order_id parameter in admin/print_order.php.
Exploits (4)
This exploit demonstrates a SQL injection vulnerability in CubeCart's view_order.php by injecting a UNION SELECT statement to extract data from the database. The attack leverages improper input sanitization to manipulate the SQL query.
The exploit demonstrates a SQL injection vulnerability in CubeCart by manipulating the 'view_doc' parameter to perform a UNION-based SQLi attack. It retrieves arbitrary data by injecting a malicious SQL query.
This exploit demonstrates a SQL injection vulnerability in CubeCart's admin/print_order.php by injecting a UNION SELECT statement to retrieve additional data from the database. The vulnerability arises due to insufficient input sanitization.
The exploit demonstrates SQL injection vulnerabilities in CubeCart's admin/forgot_pass.php endpoint, allowing attackers to bypass authentication and extract data from the database.