Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-4918. PoCs published by s0cratex.
AI-analyzed exploit summary This PHP script exploits a SQL injection vulnerability in Gelato CMS by injecting a UNION-based query to extract user credentials (username and MD5 password hash) from the database. It interacts with the target via HTTP and parses the response to display the leaked data.
Description
SQL injection vulnerability in classes/gelato.class.php in Gelato allows remote attackers to execute arbitrary SQL commands via the post parameter to index.php.
Exploits (1)
This PHP script exploits a SQL injection vulnerability in Gelato CMS by injecting a UNION-based query to extract user credentials (username and MD5 password hash) from the database. It interacts with the target via HTTP and parses the response to display the leaked data.