CVE-2008-3355
Camera Life 2.6.2 - SQL Injection via id Parameter in sitemap.xml.php
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-3355. PoCs published by nuclear.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Camera Life 2.6.2, allowing an attacker to extract user credentials via a crafted URL parameter. The PoC uses a UNION-based SQLi to concatenate and retrieve username and password fields from the 'users' table.
Description
SQL injection vulnerability in sitemap.xml.php in Camera Life 2.6.2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in Camera Life 2.6.2, allowing an attacker to extract user credentials via a crafted URL parameter. The PoC uses a UNION-based SQLi to concatenate and retrieve username and password fields from the 'users' table.