Exploitation Summary
EIP tracks 2 public exploits for CVE-2007-5222. PoCs published by undefined1_, unidentified1_ is.
AI-analyzed exploit summary This exploit targets CVE-2007-5222, a SQL injection vulnerability in MDPro 1.0.76. It extracts admin credentials by manipulating the Referer header to perform blind SQL injection, retrieving user IDs, usernames, and password hashes.
Description
SQL injection vulnerability in index.php in MAXdev MDPro (MD-Pro) 1.0.76 allows remote attackers to execute arbitrary SQL commands via a "Firefox ID=" substring in a Referer HTTP header.
Exploits (2)
This exploit targets CVE-2007-5222, a SQL injection vulnerability in MDPro 1.0.76. It extracts admin credentials by manipulating the Referer header to perform blind SQL injection, retrieving user IDs, usernames, and password hashes.
This Perl script exploits an SQL injection vulnerability in MD-Pro 1.0.76 by manipulating the Referer header to extract user credentials (UID, username, and password) from the database. It uses blind SQLi techniques to enumerate data character by character.