Exploitation Summary
EIP tracks 2 public exploits for CVE-2008-2479. PoCs published by Unohope.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in phpFix 2.0 by injecting a UNION-based query to extract sensitive data (passwords and account details) from the 'auth' table. The attack leverages unsanitized user input in the 'kind' parameter.
Description
Multiple SQL injection vulnerabilities in phpFix 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) kind parameter to fix/browse.php and the (2) account parameter to auth/00_pass.php.
Exploits (2)
This exploit demonstrates a SQL injection vulnerability in phpFix 2.0 by injecting a UNION-based query to extract sensitive data (passwords and account details) from the 'auth' table. The attack leverages unsanitized user input in the 'kind' parameter.
This exploit demonstrates SQL injection vulnerabilities in phpFix 2.0 by manipulating the 'account' parameter in the authentication process. The PoC provides URLs that bypass authentication by injecting SQL conditions.