Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-2520. PoCs published by netVigilance.
AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in MyNews by manipulating the 'authacc' cookie to bypass authentication and access session data. The payload uses a UNION-based SQLi to retrieve data from the 'sessions' table.
Description
SQL injection vulnerability in admin.php in MyNews 0.10, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the authacc cookie.
Exploits (1)
This exploit demonstrates an SQL injection vulnerability in MyNews by manipulating the 'authacc' cookie to bypass authentication and access session data. The payload uses a UNION-based SQLi to retrieve data from the 'sessions' table.