Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-2670. PoCs published by Unohope.
AI-analyzed exploit summary This exploit demonstrates SQL injection vulnerabilities in Insanely Simple Blog 0.5. It includes proof-of-concept URLs and a form to exploit the vulnerabilities, allowing an attacker to read arbitrary files from the server using the `load_file` function.
Description
Multiple SQL injection vulnerabilities in index.php in Insanely Simple Blog 0.5 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter, or (2) the term parameter in a search action. NOTE: the current_subsection parameter is already covered by CVE-2007-3889.
Exploits (1)
This exploit demonstrates SQL injection vulnerabilities in Insanely Simple Blog 0.5. It includes proof-of-concept URLs and a form to exploit the vulnerabilities, allowing an attacker to read arbitrary files from the server using the `load_file` function.