CVE-2008-0092
phpWebSite 1.4.0 - Cross-Site Scripting via Search Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-0092. PoCs published by RusH.
AI-analyzed exploit summary This Perl script exploits a SQL injection vulnerability in phpWebSite by injecting a UNION-based query to extract user credentials (username and password hash) from the database. It targets phpWebSite versions up to 0.10.0 by manipulating the 'module' parameter in the URL.
Description
Cross-site scripting (XSS) vulnerability in index.php in the search module in Appalachian State University phpWebSite 1.4.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter.
Exploits (1)
This Perl script exploits a SQL injection vulnerability in phpWebSite by injecting a UNION-based query to extract user credentials (username and password hash) from the database. It targets phpWebSite versions up to 0.10.0 by manipulating the 'module' parameter in the URL.