CVE-2008-1968
Cezanne 7 - Authenticated SQL Injection via FUNID Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-1968. PoCs published by Juan de la Fuente Costa.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Cezanne Software by injecting a time-based delay payload into the 'FUNID' parameter. The payload uses 'waitfor delay' to confirm the vulnerability, which can be further exploited to access or modify data.
Description
Multiple SQL injection vulnerabilities in Cezanne 7 allow remote authenticated users to execute arbitrary SQL commands via the FUNID parameter to (1) CFLookup.asp and (2) CznCommon/CznCustomContainer.asp.
Exploits (2)
This exploit demonstrates a SQL injection vulnerability in Cezanne Software by injecting a time-based delay payload into the 'FUNID' parameter. The payload uses 'waitfor delay' to confirm the vulnerability, which can be further exploited to access or modify data.
This exploit demonstrates a SQL injection vulnerability in Cezanne Software by injecting a time-based delay payload. The payload uses the 'waitfor delay' technique to confirm the vulnerability.