CVE-2008-4073
Zanfi Autodealers CMS AutOnline - SQL Injection via pageid Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-4073. PoCs published by r45c4l.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Zanfi CMS lite / Autodealers CMS AutOnline. The PoC injects a UNION-based SQL query to extract database version, name, and user information.
Description
SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a DBpAGE action.
Exploits (2)
This exploit demonstrates a SQL injection vulnerability in Zanfi CMS lite / Autodealers CMS AutOnline. The PoC injects a UNION-based SQL query to extract database version, name, and user information.
This exploit demonstrates a SQL injection vulnerability in Autodealers CMS AutOnline by injecting a crafted SQL query via the 'id' parameter. The payload extracts database information, version, and user details through a UNION-based attack.