CVE-2008-4093
YourOwnBux 3.1 and 3.2 beta - SQL Injection via User Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-4093. PoCs published by ~!Dok_tOR!~.
AI-analyzed exploit summary The exploit demonstrates a SQL injection vulnerability in YourOwnBux 3.1 and 3.2 Beta via the 'user' parameter in memberstats.php. It uses a UNION-based attack to extract username and password data from the tb_users table.
Description
SQL injection vulnerability in memberstats.php in YourOwnBux 3.1 and 3.2 beta, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter.
Exploits (1)
The exploit demonstrates a SQL injection vulnerability in YourOwnBux 3.1 and 3.2 Beta via the 'user' parameter in memberstats.php. It uses a UNION-based attack to extract username and password data from the tb_users table.