Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-1733. PoCs published by MantiS.
AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in PU Arcade 2.2 by injecting a UNION SELECT query to retrieve usernames and passwords from the 'jos_users' table. The attack leverages unsanitized input in the 'gid' parameter.
Description
SQL injection vulnerability in puarcade.class.php 2.2 and earlier in the Pragmatic Utopia PU Arcade (com_puarcade) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the gid parameter to index.php.
Exploits (1)
This exploit demonstrates an SQL injection vulnerability in PU Arcade 2.2 by injecting a UNION SELECT query to retrieve usernames and passwords from the 'jos_users' table. The attack leverages unsanitized input in the 'gid' parameter.