Exploitation Summary
EIP tracks 3 public exploits for CVE-2007-4956. PoCs published by s4mi.
AI-analyzed exploit summary This exploit targets a SQL injection vulnerability in KwsPHP 1.0's stats module, specifically in the 'typenav' parameter. It performs a UNION-based SQL injection to extract admin credentials from the database when magic_quotes_gpc is disabled.
Description
Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the pseudo parameter to login.php, (2) the id parameter to index.php in a carnet editer action in the Member_Space (espace_membre) module, or (3) the typenav parameter to index.php in a browser aff action in the stats module.
Exploits (3)
This exploit targets a SQL injection vulnerability in KwsPHP 1.0's stats module, specifically in the 'typenav' parameter. It performs a UNION-based SQL injection to extract admin credentials from the database when magic_quotes_gpc is disabled.
This exploit targets a SQL injection vulnerability in KwsPHP v1.0's Member_Space module. It authenticates with provided credentials, then injects a malicious SQL query to extract admin credentials from the database.
This exploit targets a SQL injection vulnerability in KwsPHP 1.0's login.php, allowing an attacker to extract admin credentials when magic_quotes_gpc is disabled. It crafts a malicious POST request to dump the password hash from the users table.