Exploitation Summary
EIP tracks 2 public exploits for CVE-2007-1493. PoCs published by DarkFig.
AI-analyzed exploit summary This exploit targets a SQL injection vulnerability in NukeSentinel <= 2.5.06 by manipulating the 'Client-IP' header to extract admin credentials via time-based blind SQLi. It uses a benchmark-based delay to infer character values from the database.
Description
nukesentinel.php in NukeSentinel 2.5.06 and earlier uses a permissive regular expression to validate an IP address, which allows remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header, due to an incomplete patch for CVE-2007-1172.
Exploits (2)
This exploit targets a SQL injection vulnerability in NukeSentinel <= 2.5.06 by manipulating the 'Client-IP' header to extract admin credentials via time-based blind SQLi. It uses a benchmark-based delay to infer character values from the database.
This exploit leverages a SQL injection vulnerability in NukeSentinel 2.5.05 to perform file disclosure. It manipulates the 'Client-IP' header to inject malicious SQL queries, ultimately reading arbitrary files from the server.