Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-2672. PoCs published by Mehmet Ince.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in PHP Coupon Script 3.0 via the 'bus' parameter in the 'viewbus' page. The payload uses a UNION-based attack to extract username and password fields from the 'users' table.
Description
SQL injection vulnerability in index.php in PHP Coupon Script 3.0 allows remote attackers to execute arbitrary SQL commands via the bus parameter in a viewbus page.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in PHP Coupon Script 3.0 via the 'bus' parameter in the 'viewbus' page. The payload uses a UNION-based attack to extract username and password fields from the 'users' table.