Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-2549. PoCs published by John Martinelli.
AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in TurnkeyWebTools SunShop Shopping Cart v4 by submitting a malformed input to the 'c' parameter in index.php. The PoC provides a simple HTML form to trigger the vulnerability, which could allow an attacker to manipulate SQL queries.
Description
SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 allows remote attackers to execute arbitrary SQL commands via the (1) c or (2) quantity parameter.
Exploits (1)
This exploit demonstrates an SQL injection vulnerability in TurnkeyWebTools SunShop Shopping Cart v4 by submitting a malformed input to the 'c' parameter in index.php. The PoC provides a simple HTML form to trigger the vulnerability, which could allow an attacker to manipulate SQL queries.