Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-3755. PoCs published by Hussin X.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in the 'category' parameter of the Classifieds script, allowing an attacker to extract admin credentials via a UNION-based attack. The payload concatenates username and password from the 'adminsettings' table.
Description
SQL injection vulnerability in view.php in YourFreeWorld Classifieds Script allows remote attackers to execute arbitrary SQL commands via the category parameter.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in the 'category' parameter of the Classifieds script, allowing an attacker to extract admin credentials via a UNION-based attack. The payload concatenates username and password from the 'adminsettings' table.