Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-4072. PoCs published by Khashayar Fereidani.
AI-analyzed exploit summary This exploit targets a SQL injection vulnerability in PhsBlog v0.2, allowing an attacker to bypass authentication and extract user credentials or read arbitrary files from the server. It uses a union-based SQL injection technique to retrieve data from the database.
Description
Multiple SQL injection vulnerabilities in index.php in phsBlog 0.2 allow remote attackers to execute arbitrary SQL commands via (1) the sid parameter in a pickup action or (2) the sql_cid parameter, different vectors than CVE-2008-3588.
Exploits (1)
This exploit targets a SQL injection vulnerability in PhsBlog v0.2, allowing an attacker to bypass authentication and extract user credentials or read arbitrary files from the server. It uses a union-based SQL injection technique to retrieve data from the database.