Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-3433. PoCs published by t0pP8uZz.
AI-analyzed exploit summary This exploit demonstrates SQL injection vulnerabilities in Pharmacy System v2 and prior versions. It leverages UNION-based SQLi to extract admin and user credentials from the database by manipulating the 'ID' parameter in the cart functionality.
Description
SQL injection vulnerability in index.php in Pharmacy System 2 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter in an add action.
Exploits (1)
This exploit demonstrates SQL injection vulnerabilities in Pharmacy System v2 and prior versions. It leverages UNION-based SQLi to extract admin and user credentials from the database by manipulating the 'ID' parameter in the cart functionality.