Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-1869. PoCs published by S@BUN.
AI-analyzed exploit summary This exploit demonstrates SQL injection in Site Sift scripts, allowing an attacker to extract admin credentials via UNION-based SQLi. The PoC provides specific query strings to dump username and password hashes from the admin table.
Description
SQL injection vulnerability in Site Sift Listings allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php. NOTE: this issue might be site-specific.
Exploits (1)
This exploit demonstrates SQL injection in Site Sift scripts, allowing an attacker to extract admin credentials via UNION-based SQLi. The PoC provides specific query strings to dump username and password hashes from the admin table.