Exploitation Summary
EIP tracks 2 public exploits for CVE-2008-3250. PoCs published by ldma, QTRinux.
AI-analyzed exploit summary This exploit targets a SQL injection vulnerability in Arctic Issue Tracker v2.0.0, extracting admin credentials via a crafted HTTP request. It uses a UNION-based SQLi to dump the username and password from the 'arctic_user' table.
Description
SQL injection vulnerability in index.php in Arctic Issue Tracker 2.0.0 allows remote attackers to execute arbitrary SQL commands via the filter parameter.
Exploits (2)
This exploit targets a SQL injection vulnerability in Arctic Issue Tracker v2.0.0, extracting admin credentials via a crafted HTTP request. It uses a UNION-based SQLi to dump the username and password from the 'arctic_user' table.
This exploit demonstrates a SQL injection vulnerability in Arctic Issue Tracker v2.0.0 via the 'filter' parameter in index.php. The PoC uses a UNION-based SQLi to extract username and password from the 'arctic_user' table.