Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-7005. PoCs published by Luny.
AI-analyzed exploit summary The provided text describes SQL injection and HTML injection vulnerabilities in PSY Auction due to improper input sanitization. It includes a basic example URL demonstrating SQL injection but lacks executable exploit code.
Description
SQL injection vulnerability in item.php in PSY Auction allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploits (1)
The provided text describes SQL injection and HTML injection vulnerabilities in PSY Auction due to improper input sanitization. It includes a basic example URL demonstrating SQL injection but lacks executable exploit code.