Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-3245. PoCs published by Mr.SQL.
AI-analyzed exploit summary This exploit demonstrates a remote SQL injection vulnerability in phpHoo3 versions 4.4.8, 4.3.9, 4.3.10, and 5.2.6. The attack leverages the 'viewCat' parameter to inject malicious SQL queries, extracting database information such as user, version, and database name.
Description
SQL injection vulnerability in phpHoo3.php in phpHoo3 4.3.9, 4.3.10, 4.4.8, and 5.2.6 allows remote attackers to execute arbitrary SQL commands via the viewCat parameter.
Exploits (1)
This exploit demonstrates a remote SQL injection vulnerability in phpHoo3 versions 4.4.8, 4.3.9, 4.3.10, and 5.2.6. The attack leverages the 'viewCat' parameter to inject malicious SQL queries, extracting database information such as user, version, and database name.