CVE-2008-4185
webCMS Portal Edition - SQL Injection via id Parameter in documentos Action
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-4185. PoCs published by JosS.
AI-analyzed exploit summary This Perl script exploits a blind SQL injection vulnerability in webCMS Portal Edition by injecting malicious SQL queries into the 'id' parameter of index.php. It uses multi-threading to brute-force character extraction from the database, specifically targeting user credentials.
Description
SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the id parameter in a documentos action, a different vector than CVE-2008-3213.
Exploits (1)
This Perl script exploits a blind SQL injection vulnerability in webCMS Portal Edition by injecting malicious SQL queries into the 'id' parameter of index.php. It uses multi-threading to brute-force character extraction from the database, specifically targeting user credentials.