Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-2554. PoCs published by JosS.
AI-analyzed exploit summary This is a detailed writeup describing blind SQL injection vulnerabilities in bp blog <= 6.0, specifically in template_permalink.asp and template_archives_cat.asp. It includes manual exploitation techniques and examples for verifying table/column existence and extracting data.
Description
Multiple SQL injection vulnerabilities in BP Blog 6.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to template_permalink.asp and (2) cat parameter to template_archives_cat.asp.
Exploits (1)
This is a detailed writeup describing blind SQL injection vulnerabilities in bp blog <= 6.0, specifically in template_permalink.asp and template_archives_cat.asp. It includes manual exploitation techniques and examples for verifying table/column existence and extracting data.