CVE-2008-2492
Campus Bulletin Board 3.4 - SQL Injection via id or review Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-2492. PoCs published by Unohope.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Campus Bulletin Board 3.4. The provided URL manipulates the 'id' parameter to extract user credentials (uid and password) from the database via a UNION-based SQLi attack.
Description
Multiple SQL injection vulnerabilities in Campus Bulletin Board 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to post3/view.asp and the (2) review parameter to post3/book.asp.
Exploits (2)
This exploit demonstrates a SQL injection vulnerability in Campus Bulletin Board 3.4. The provided URL manipulates the 'id' parameter to extract user credentials (uid and password) from the database via a UNION-based SQLi attack.
This exploit demonstrates a SQL injection vulnerability in Campus Bulletin Board 3.4. The PoC uses a crafted URL to extract user credentials (password and uid) from the database via a UNION-based SQLi attack.