Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-3785. PoCs published by ~!Dok_tOR!~.
AI-analyzed exploit summary The exploit demonstrates SQL injection in MiaCMS <= 4.6.5 via manipulated 'id' parameters in multiple endpoints, leaking user credentials (username:password) from the 'mia_users' table. The payloads use UNION-based SQLi with concat_ws to exfiltrate data.
Description
Multiple SQL injection vulnerabilities in the com_content component in MiaCMS 4.6.5 allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) view, (2) category, or (3) blogsection action to index.php.
Exploits (1)
The exploit demonstrates SQL injection in MiaCMS <= 4.6.5 via manipulated 'id' parameters in multiple endpoints, leaking user credentials (username:password) from the 'mia_users' table. The payloads use UNION-based SQLi with concat_ws to exfiltrate data.