Exploitation Summary
EIP tracks 2 public exploits for CVE-2008-3748. PoCs published by Mr.Elgaarh, Hussin X.
AI-analyzed exploit summary This is a writeup describing a SQL injection vulnerability in Active PHP Bookmarks v1.3. It provides examples of exploiting the vulnerability to extract admin credentials but does not include functional exploit code.
Description
SQL injection vulnerability in view_group.php in Active PHP Bookmarks (APB) 1.1.02 and 1.2.06 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Exploits (2)
This is a writeup describing a SQL injection vulnerability in Active PHP Bookmarks v1.3. It provides examples of exploiting the vulnerability to extract admin credentials but does not include functional exploit code.
This exploit demonstrates a SQL injection vulnerability in Active PHP Bookmarks v1.1.02, allowing an attacker to extract user credentials (username and password) from the database via a crafted UNION-based SQL query.