Exploitation Summary
EIP tracks 2 public exploits for CVE-2007-2675. PoCs published by Mehmet Ince, r45c4l.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Pre Classifieds Listings v1.0 via the 'category' parameter in search.php. It allows an attacker to extract sensitive information such as passwords and usernames from the database.
Description
SQL injection vulnerability in search.php in Pre Classifieds Listings 1.0 allows remote attackers to execute arbitrary SQL commands via the category parameter.
Exploits (2)
This exploit demonstrates a SQL injection vulnerability in Pre Classifieds Listings v1.0 via the 'category' parameter in search.php. It allows an attacker to extract sensitive information such as passwords and usernames from the database.
This exploit demonstrates a SQL injection vulnerability in ASP Classifieds via the 'category' parameter in search.php. The PoC shows a simple UNION-based SQLi to extract the database version.