CVE-2007-4069
IndexScript 2.8 - SQL Injection via show_cat.php cat_id Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-4069. PoCs published by xssvgamer.
AI-analyzed exploit summary This exploit demonstrates a blind SQL injection vulnerability in IndexScript's show_cat.php. The vulnerability arises from improper sanitization of the cat_id parameter, allowing an attacker to extract login credentials from the dir_login table.
Description
SQL injection vulnerability in show_cat.php in IndexScript 2.8 and earlier allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.
Exploits (1)
This exploit demonstrates a blind SQL injection vulnerability in IndexScript's show_cat.php. The vulnerability arises from improper sanitization of the cat_id parameter, allowing an attacker to extract login credentials from the dir_login table.