CVE-2008-4142

ephpscripts e-php_cms - SQL Injection via article.php es_id Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-4142. PoCs published by HaCkeR_EgY.

AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in E-Php Content Management System via the 'es_id' parameter in article.php. The PoC uses UNION-based SQLi to extract database information such as the current user and version.

Description

SQL injection vulnerability in article.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via the es_id parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by HaCkeR_EgY · textwebappsphp

https://www.exploit-db.com/exploits/6483

View Code ZIP pw:eip

This exploit demonstrates a SQL injection vulnerability in E-Php Content Management System via the 'es_id' parameter in article.php. The PoC uses UNION-based SQLi to extract database information such as the current user and version.

Classification

Working Poc 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: E-Php Content Management System

No auth needed

Prerequisites: Target running E-Php Content Management System with vulnerable article.php endpoint

MITRE ATT&CK