Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-3951. PoCs published by DeViL iRaQ.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in The Real Estate Script's view_ann.php, allowing an attacker to extract admin credentials via a UNION-based SQLi attack. The PoC provides a direct query to retrieve the admin username and password from the admin_users table.
Description
SQL injection vulnerability in view_ann.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attackers to execute arbitrary SQL commands via the ann_id parameter.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in The Real Estate Script's view_ann.php, allowing an attacker to extract admin credentials via a UNION-based SQLi attack. The PoC provides a direct query to retrieve the admin username and password from the admin_users table.