CVE-2007-2622
TaskDriver < 1.2 - SQL Injection via Username or Taskid Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-2622. PoCs published by Silentz.
AI-analyzed exploit summary This Perl script exploits a SQL injection vulnerability in TaskDriver <= 1.2, allowing login bypass and retrieval of admin credentials via crafted HTTP requests. It demonstrates both authentication bypass and information leakage through SQLi.
Description
Multiple SQL injection vulnerabilities in TaskDriver 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the username parameter to login.php or (2) the taskid parameter to notes.php.
Exploits (1)
This Perl script exploits a SQL injection vulnerability in TaskDriver <= 1.2, allowing login bypass and retrieval of admin credentials via crafted HTTP requests. It demonstrates both authentication bypass and information leakage through SQLi.