Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-3154. PoCs published by Bl@ckbe@rD.
AI-analyzed exploit summary This Perl script exploits a blind SQL injection vulnerability in CMS WebBlizzard by manipulating the 'page' parameter in the URL to extract admin credentials from the MySQL user table. It uses a time-based technique to infer data by checking for the presence of the string 'Previous' in the response.
Description
SQL injection vulnerability in index.php in WebBlizzard CMS allows remote attackers to execute arbitrary SQL commands via the page parameter.
Exploits (1)
This Perl script exploits a blind SQL injection vulnerability in CMS WebBlizzard by manipulating the 'page' parameter in the URL to extract admin credentials from the MySQL user table. It uses a time-based technique to infer data by checking for the presence of the string 'Previous' in the response.