Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-1732. PoCs published by 0in.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Prediction Football v1.x, allowing an attacker to extract admin credentials via a crafted URL. The PoC uses a UNION-based SQLi to retrieve the username and password from the 'pluserdata' table.
Description
SQL injection vulnerability in showpredictionsformatch.php in Prediction Football 1.x allows remote attackers to execute arbitrary SQL commands via the matchid parameter in a dupa action.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in Prediction Football v1.x, allowing an attacker to extract admin credentials via a crafted URL. The PoC uses a UNION-based SQLi to retrieve the username and password from the 'pluserdata' table.