CVE-2008-2184
SMartBlog 1.3 - SQL Injection via mois an jour id or login Parameters
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-2184.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Smartblog 3.8.6.8, allowing an attacker to extract user credentials via a crafted UNION SELECT query. The PoC includes a clear example of the malicious payload and its execution path.
Description
Multiple SQL injection vulnerabilities in SMartBlog (aka SMBlog) 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) mois, (2) an, (3) jour, and (4) id parameters to index.php, and the (5) login parameter to gestion/logon.php, different vectors than CVE-2008-2183. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in Smartblog 3.8.6.8, allowing an attacker to extract user credentials via a crafted UNION SELECT query. The PoC includes a clear example of the malicious payload and its execution path.