CVE-2008-0291

RichStrong CMS - SQL Injection via showproduct.asp cat Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-0291. PoCs published by JosS.

AI-analyzed exploit summary This Perl script exploits a SQL injection vulnerability in RichStrong CMS via the 'cat' parameter in 'showproduct.asp'. It updates all columns in the 'subject' table with a user-provided message, demonstrating arbitrary SQL command execution.

Description

SQL injection vulnerability in showproduct.asp in RichStrong CMS allows remote attackers to execute arbitrary SQL commands via the cat parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by JosS · perlwebappsasp

https://www.exploit-db.com/exploits/4910

View Code ZIP pw:eip

This Perl script exploits a SQL injection vulnerability in RichStrong CMS via the 'cat' parameter in 'showproduct.asp'. It updates all columns in the 'subject' table with a user-provided message, demonstrating arbitrary SQL command execution.

Classification

Working Poc 95%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: RichStrong CMS

No auth needed

Prerequisites: Target running RichStrong CMS with vulnerable 'showproduct.asp' endpoint

MITRE ATT&CK