Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-6551. PoCs published by MhZ91.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in MailMachine Pro 2.2.4, allowing an attacker to extract admin credentials via a crafted URL. The PoC uses a UNION-based SQLi to retrieve user_id and password from the mailmachine_users table.
Description
SQL injection vulnerability in showMsg.php in MailMachine Pro 2.2.4, and other versions before 2.2.6, allows remote attackers to execute arbitrary SQL commands via the id parameter.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in MailMachine Pro 2.2.4, allowing an attacker to extract admin credentials via a crafted URL. The PoC uses a UNION-based SQLi to retrieve user_id and password from the mailmachine_users table.