Exploitation Summary
EIP tracks 2 public exploits for CVE-2007-4603. PoCs published by SmOk3.
AI-analyzed exploit summary The provided text describes SQL injection vulnerabilities in ACG News 1.0, with example URLs demonstrating how to exploit the vulnerabilities to extract database information such as version and user details.
Description
Multiple SQL injection vulnerabilities in index.php in ACG News 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the aid parameter in a showarticle action or (2) the catid parameter in a showcat action.
Exploits (2)
The provided text describes SQL injection vulnerabilities in ACG News 1.0, with example URLs demonstrating how to exploit the vulnerabilities to extract database information such as version and user details.
This exploit demonstrates SQL injection vulnerabilities in ACG News 1.0 via the 'aid' and 'catid' parameters in index.php. The PoC includes UNION-based SQLi examples to extract database version and user information.