Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-5003. PoCs published by BazOka-HaCkEr.
AI-analyzed exploit summary This is a writeup describing a blind SQL injection vulnerability in Shahrood's ndetail.php. It provides an example payload but does not include functional exploit code.
Description
SQL injection vulnerability in ndetail.php in Shahrood allows remote attackers to execute arbitrary SQL commands via the id parameter.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by BazOka-HaCkEr · textwebappsphp
https://www.exploit-db.com/exploits/6934
This is a writeup describing a blind SQL injection vulnerability in Shahrood's ndetail.php. It provides an example payload but does not include functional exploit code.
Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Theoretical
Target:
Shahrood (version unspecified)
No auth needed
Prerequisites:
access to the vulnerable ndetail.php endpoint
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (4)
Core 4
Core References
Exploit, Third Party Advisory exploit
x_refsource_exploit-db
https://www.exploit-db.com/exploits/6934
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/46295
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/2996
Third Party Advisory third-party-advisory
x_refsource_sreason
http://securityreason.com/securityalert/4569
Scores
EPSS
0.0101
EPSS Percentile
58.8%
Details
CWE
CWE-89
Status
published
Products (1)
shahrood/shahrood
Published
Nov 10, 2008
Tracked Since
Feb 18, 2026