CVE-2006-6208
Enthrallweb eClassifieds - SQL Injection via AD_ID, cat_id, sub_id, ad_id, cid, or sid Parameters
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2006-6208. PoCs published by laurent gaffie.
AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in eClassifieds, where the 'sid' parameter in 'dirSub.asp' is not properly sanitized. It lacks actual exploit code but references a known CVE and vulnerability details.
Description
Multiple SQL injection vulnerabilities in Enthrallweb eClassifieds allow remote attackers to execute arbitrary SQL commands via the (1) AD_ID, (2) cat_id, (3) sub_id, and (4) ad_id parameters to (a) ad.asp, the (5) cid parameter to (b) dircat.asp, and the (6) sid parameter to (c) dirSub.asp.
Exploits (3)
The provided text describes a SQL injection vulnerability in eClassifieds, where the 'sid' parameter in 'dirSub.asp' is not properly sanitized. It lacks actual exploit code but references a known CVE and vulnerability details.
The provided text describes a SQL injection vulnerability in eClassifieds, where the 'cid' parameter in 'dircat.asp' is not properly sanitized. It lacks actual exploit code but references the vulnerability and potential impact.
The provided text describes SQL injection vulnerabilities in eClassifieds, detailing multiple attack vectors via URL parameters. It lacks executable code but outlines the vulnerability's nature and potential impact.