Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-3767. PoCs published by e.wiZz!.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in phpBazar, allowing an attacker to extract sensitive information such as usernames and passwords from the database. The PoC includes manual SQLi techniques to determine the number of columns and extract data via UNION-based injection.
Description
SQL injection vulnerability in classified.php in phpBazar 2.0.2 allows remote attackers to execute arbitrary SQL commands via the adid parameter.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in phpBazar, allowing an attacker to extract sensitive information such as usernames and passwords from the database. The PoC includes manual SQLi techniques to determine the number of columns and extract data via UNION-based injection.