Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-1293. PoCs published by s0cratex.
AI-analyzed exploit summary This exploit performs a blind SQL injection attack against RPS 6.2 to extract admin credentials by brute-forcing each character of the username and password via ASCII values. It leverages a time-based condition to infer successful character matches.
Description
SQL injection vulnerability in Rigter Portal System (RPS) 6.2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the categoria parameter to the top-level URI (index.php), possibly related to ver_descarga.php.
Exploits (1)
This exploit performs a blind SQL injection attack against RPS 6.2 to extract admin credentials by brute-forcing each character of the username and password via ASCII values. It leverages a time-based condition to infer successful character matches.