CVE-2008-3420

Mobius for Mimsy XG <1.4.4.1 - SQL Injection

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-3420. PoCs published by dun.

AI-analyzed exploit summary This exploit demonstrates SQL injection vulnerabilities in Mobius Web Publishing Software versions <= 1.4.4.1. It provides specific URLs to exploit the vulnerabilities in browse.php and detail.php, allowing unauthorized data extraction from the Webusers table.

Description

Multiple SQL injection vulnerabilities in Mobius for Mimsy XG 1 1.4.4.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to browse.php or (2) the s parameter in an exhibitions action to detail.php.

Exploits (1)

exploitdb WORKING POC VERIFIED

by dun · textwebappsphp

https://www.exploit-db.com/exploits/6138

View Code ZIP pw:eip

This exploit demonstrates SQL injection vulnerabilities in Mobius Web Publishing Software versions <= 1.4.4.1. It provides specific URLs to exploit the vulnerabilities in browse.php and detail.php, allowing unauthorized data extraction from the Webusers table.

Classification

Working Poc 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: Mobius Web Publishing Software <= 1.4.4.1

No auth needed

Prerequisites: Access to the target web application · Knowledge of the table structure

MITRE ATT&CK