CVE-2008-2746

Gryphon gllcTS2 4.2.4 - SQL Injection via login.php detail Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-2746. PoCs published by TheDefaced.

AI-analyzed exploit summary This is a writeup detailing an SQL injection vulnerability in gllcts2 >= 4.2.4, specifically in the login.php file where user input is not properly sanitized. The document includes a description, vulnerability details, a fix, and credits.

Description

SQL injection vulnerability in login.php in Gryphon gllcTS2 4.2.4 allows remote attackers to execute arbitrary SQL commands via the detail parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by TheDefaced · phpwebappsphp
https://www.exploit-db.com/exploits/5796

This is a writeup detailing an SQL injection vulnerability in gllcts2 >= 4.2.4, specifically in the login.php file where user input is not properly sanitized. The document includes a description, vulnerability details, a fix, and credits.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: gllcts2 >= 4.2.4
No auth needed
Prerequisites: Access to the vulnerable login.php endpoint
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/5796
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/29697
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/43057

Scores

EPSS 0.0101
EPSS Percentile 58.5%

Details

CWE
CWE-89
Status published
Products (1)
gryphon/gllcts2 4.2.4
Published Jun 17, 2008
Tracked Since Feb 18, 2026