Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-3445. PoCs published by CraCkEr.
AI-analyzed exploit summary This exploit demonstrates a remote SQL injection vulnerability in phpmyrealty, allowing an attacker to extract admin credentials via a crafted UNION SELECT query. The PoC includes a live demo URL and targets the 'location' parameter in the index.php file.
Description
SQL injection vulnerability in index.php in phpMyRealty (PMR) 2.0.0 allows remote attackers to execute arbitrary SQL commands via the location parameter.
Exploits (1)
This exploit demonstrates a remote SQL injection vulnerability in phpmyrealty, allowing an attacker to extract admin credentials via a crafted UNION SELECT query. The PoC includes a live demo URL and targets the 'location' parameter in the index.php file.