Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-2191. PoCs published by K-159.
AI-analyzed exploit summary This exploit demonstrates a blind SQL injection vulnerability in the pnEncyclopedia module for PostNuke. It allows remote attackers to extract sensitive information such as usernames and hashed passwords by manipulating the 'id' parameter in a crafted URL.
Description
SQL injection vulnerability in the pnEncyclopedia module 0.2.0 and earlier for PostNuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a display_term action to index.php.
Exploits (1)
This exploit demonstrates a blind SQL injection vulnerability in the pnEncyclopedia module for PostNuke. It allows remote attackers to extract sensitive information such as usernames and hashed passwords by manipulating the 'id' parameter in a crafted URL.