Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-1920. PoCs published by Kacper.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in SmodBIP <= 1.06, specifically targeting the 'aktualnosci zoom' module. It extracts admin credentials (name, surname, email, and password) via UNION-based SQL injection.
Description
SQL injection vulnerability in index.php in the aktualnosci module in SmodBIP 1.06 and earlier allows remote attackers to execute arbitrary SQL commands via the zoom parameter, possibly related to home.php.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in SmodBIP <= 1.06, specifically targeting the 'aktualnosci zoom' module. It extracts admin credentials (name, surname, email, and password) via UNION-based SQL injection.