CVE-2006-5765
article_script <= 1.6.3 - SQL Injection via RSS Category Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-5765. PoCs published by Liz0ziM.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Article Script versions 1.* and 1.6.3. The PoC shows how an attacker can extract admin credentials by injecting a UNION-based SQL query into the 'category' parameter of the RSS feed script.
Description
SQL injection vulnerability in rss.php in Article Script 1.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in Article Script versions 1.* and 1.6.3. The PoC shows how an attacker can extract admin credentials by injecting a UNION-based SQL query into the 'category' parameter of the RSS feed script.