Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-4172. PoCs published by Hussin X.
AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in the Cars & Vehicle script by injecting a UNION-based query to extract database information such as user, version, and database name. The attack leverages improper sanitization of the 'lnkid' parameter in the URL.
Description
SQL injection vulnerability in page.php in Cars & Vehicle (aka Cars-Vehicle Script) allows remote attackers to execute arbitrary SQL commands via the lnkid parameter.
Exploits (1)
This exploit demonstrates an SQL injection vulnerability in the Cars & Vehicle script by injecting a UNION-based query to extract database information such as user, version, and database name. The attack leverages improper sanitization of the 'lnkid' parameter in the URL.