CVE-2007-0582

chernobile 1.0 - SQL Injection via User Field

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-0582. PoCs published by ajann.

AI-analyzed exploit summary This is a writeup describing a SQL injection vulnerability in chernobiLe Portal 1.0 via the default.asp page using a POST method. It outlines a brute-force technique to extract user information from the database.

Description

SQL injection vulnerability in default.asp in ChernobiLe 1.0 allows remote attackers to execute arbitrary SQL commands via the User (username) field.

Exploits (1)

exploitdb WRITEUP VERIFIED
by ajann · textwebappsasp
https://www.exploit-db.com/exploits/3210

This is a writeup describing a SQL injection vulnerability in chernobiLe Portal 1.0 via the default.asp page using a POST method. It outlines a brute-force technique to extract user information from the database.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Moderate
Reliability
Theoretical
Target: chernobiLe Portal 1.0
Auth required
Prerequisites: Valid user registration on the target system
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/36618
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/3210
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/31939
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/22280

Scores

EPSS 0.0101
EPSS Percentile 58.4%

Details

CWE
CWE-89
Status published
Products (1)
chernobile/chernobile 1.0
Published Jan 30, 2007
Tracked Since Feb 18, 2026