Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-1639. PoCs published by Khashayar Fereidani.
AI-analyzed exploit summary This Perl script exploits a SQL injection vulnerability in Neat weblog 0.2 by injecting a UNION-based query to extract admin credentials from the database. It automates the exploitation process by sending a crafted HTTP request and parsing the response to display the username and password.
Description
SQL injection vulnerability in index.php in Neat weblog 0.2 allows remote attackers to execute arbitrary SQL commands via the articleId parameter in a show action, probably related to the showArticle function in lib/lib_article.include.php.
Exploits (1)
This Perl script exploits a SQL injection vulnerability in Neat weblog 0.2 by injecting a UNION-based query to extract admin credentials from the database. It automates the exploitation process by sending a crafted HTTP request and parsing the response to display the username and password.