CVE-2006-5662
easy_notesmanager 0.0.1 - SQL Injection via Username Parameter or Search Page
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-5662. PoCs published by poplix.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Easy notesManager by injecting a UNION-based query to extract user credentials from the database. The payload bypasses input sanitization to retrieve login and password fields from the 'users' table.
Description
SQL injection vulnerability in easy notesManager (eNM) 0.0.1 allows remote attackers to execute arbitrary SQL commands via (1) the username parameter in login.php and (2) a search on the "search page."
Exploits (2)
This exploit demonstrates a SQL injection vulnerability in Easy notesManager by injecting a UNION-based query to extract user credentials from the database. The payload bypasses input sanitization to retrieve login and password fields from the 'users' table.
This exploit demonstrates an SQL injection vulnerability in Easy notesManager, allowing authentication bypass by injecting a malicious query into the 'username' field. The payload leverages a UNION-based SQLi to retrieve credentials for the 'superadmin' account.