CVE-2008-2901
Haudenschilt Family Connections CMS 1.4 - Authenticated SQL Injection via addressbook.php address Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-2901. PoCs published by CWH Underground.
AI-analyzed exploit summary This exploit demonstrates multiple SQL injection vulnerabilities in Family Connections CMS 1.4. It provides proof-of-concept URLs that extract user credentials (username and password) from the database via UNION-based SQL injection.
Description
Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 1.4 allow remote authenticated users to execute arbitrary SQL commands via the (1) address parameter to addressbook.php, the (2) getnews parameter to familynews.php, and the (3) poll_id parameter to home.php in a results action.
Exploits (1)
This exploit demonstrates multiple SQL injection vulnerabilities in Family Connections CMS 1.4. It provides proof-of-concept URLs that extract user credentials (username and password) from the database via UNION-based SQL injection.