Exploitation Summary
EIP tracks 2 public exploits for CVE-2008-3388. PoCs published by CWH Underground.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Def_Blog 1.0.3 by injecting a UNION-based query to extract user credentials (pseudo and mdp) from the def_user table. The attack leverages unsanitized input in the 'article' parameter of comlook.php.
Description
Multiple SQL injection vulnerabilities in Def-Blog 1.0.3 allow remote attackers to execute arbitrary SQL commands via the article parameter to (1) comaddok.php and (2) comlook.php.
Exploits (2)
This exploit demonstrates a SQL injection vulnerability in Def_Blog 1.0.3 by injecting a UNION-based query to extract user credentials (pseudo and mdp) from the def_user table. The attack leverages unsanitized input in the 'article' parameter of comlook.php.
This exploit demonstrates a SQL injection vulnerability in Def_Blog 1.0.3 by injecting a UNION-based query to extract user credentials (username and password) from the database. The attack leverages unsanitized input in the 'article' parameter.