CVE-2007-6466
FreeWebshop 2.2.1 - SQL Injection via prod/cat/group Parameters
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2007-6466. PoCs published by k1tk4t.
AI-analyzed exploit summary This Perl script exploits a blind SQL injection vulnerability in MOG-WebShop by manipulating the 'group' parameter in index.php. It extracts admin credentials (username or password) character-by-character using a brute-force approach with SUBSTRING and CHAR functions.
Description
Multiple SQL injection vulnerabilities in index.php in FreeWebshop 2.2.1 allow remote attackers to execute arbitrary SQL commands via (1) the prod parameter in a details action, (2) the cat parameter in a browse list action, or (3) the group parameter in a categories action. NOTE: it was later reported that MOG - Web Shop (MOG-WebShop), a product based on the same code, is also affected.
Exploits (2)
This Perl script exploits a blind SQL injection vulnerability in MOG-WebShop by manipulating the 'group' parameter in index.php. It extracts admin credentials (username or password) character-by-character using a brute-force approach with SUBSTRING and CHAR functions.
This Perl script exploits multiple SQL injection vulnerabilities in FreeWebshop 2.2.1, specifically targeting the 'prod', 'cat', and 'group' parameters. It includes a blind SQL injection technique to extract admin credentials from the 'customer' table.