Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-3824. PoCs published by GeFORC3.
AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in MzK Blog by manipulating the 'katID' parameter to extract admin credentials via UNION-based SQLi. The PoC provides direct URLs to retrieve username and password from the 'admin' table.
Description
SQL injection vulnerability in katgoster.asp in MzK Blog (tr) allows remote attackers to execute arbitrary SQL commands via the katID parameter.
Exploits (1)
This exploit demonstrates an SQL injection vulnerability in MzK Blog by manipulating the 'katID' parameter to extract admin credentials via UNION-based SQLi. The PoC provides direct URLs to retrieve username and password from the 'admin' table.