Exploitation Summary
EIP tracks 3 public exploits for CVE-2008-2565. PoCs published by YEnH4ckEr, CWH Underground.
AI-analyzed exploit summary This exploit demonstrates SQL injection vulnerabilities in PHP-AddressBook v4.0.X. It provides multiple SQLi payloads targeting different endpoints (view.php, edit.php, index.php, delete.php) to extract database information such as version and user details.
Description
Multiple SQL injection vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) view.php and (2) edit.php. NOTE: it was later reported that 4.0.x is also affected.
Exploits (3)
This exploit demonstrates SQL injection vulnerabilities in PHP-AddressBook v4.0.X. It provides multiple SQLi payloads targeting different endpoints (view.php, edit.php, index.php, delete.php) to extract database information such as version and user details.
The exploit demonstrates SQL injection and XSS vulnerabilities in PHP-Address Book <= 3.1.5. It provides functional exploit URLs for SQLi via union-based injection in view.php and edit.php, and XSS via the 'group' parameter in index.php.
The provided exploit demonstrates multiple SQL injection and XSS vulnerabilities in PHP Address Book 6.2.12. It includes specific URLs with injection points for both blind SQL injection and reflected XSS attacks.