Exploitation Summary
EIP tracks 3 public exploits for CVE-2006-6709. PoCs published by laurent gaffie.
AI-analyzed exploit summary The provided text describes SQL injection vulnerabilities in MGinternet Property Site Manager, with example URLs demonstrating unsanitized input. No actual exploit code is present, only a vulnerability description and proof-of-concept URLs.
Description
Multiple SQL injection vulnerabilities in MGinternet Property Site Manager allow remote attackers to execute arbitrary SQL commands via the (1) p parameter to (a) detail.asp; the (2) l, (3) typ, or (4) loc parameter to (b) listings.asp; or the (5) Password or (6) Username parameter to (c) admin_login.asp. NOTE: some of these details are obtained from third party information.
Exploits (3)
The provided text describes SQL injection vulnerabilities in MGinternet Property Site Manager, with example URLs demonstrating unsanitized input. No actual exploit code is present, only a vulnerability description and proof-of-concept URLs.
The provided text describes SQL injection and XSS vulnerabilities in MGinternet Property Site Manager due to insufficient input sanitization. It includes a basic example URL for SQL injection but lacks executable exploit code.
The provided text describes an SQL injection vulnerability in MGinternet Property Site Manager, allowing authentication bypass via crafted credentials. No actual exploit code is present, only a description and example payload.