Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-0601. PoCs published by ka0x.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in All Club CMS <= 0.0.1f. The vulnerability arises due to insufficient input sanitization in the 'name' parameter, allowing an attacker to inject malicious SQL queries to extract sensitive information such as user credentials.
Description
SQL injection vulnerability in index.php in All Club CMS (ACCMS) 0.0.1f and earlier allows remote attackers to execute arbitrary SQL commands via the name parameter.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in All Club CMS <= 0.0.1f. The vulnerability arises due to insufficient input sanitization in the 'name' parameter, allowing an attacker to inject malicious SQL queries to extract sensitive information such as user credentials.