CVE-2008-5132

MemHT Portal 4.0.1 - SQL Injection via X-Forwarded-For Header

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-5132. PoCs published by Ams.

AI-analyzed exploit summary This exploit targets CVE-2008-5132 in MemHT Portal 4.0.1, leveraging SQL injection via the 'X-Forwarded-For' header to write a PHP shell to the server. It includes path discovery and bruteforce mechanisms to locate the correct server path.

Description

SQL injection vulnerability in inc/ajax/ajax_rating.php in MemHT Portal 4.0.1 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Ams · pythonwebappsphp

https://www.exploit-db.com/exploits/7114

View Code ZIP pw:eip

This exploit targets CVE-2008-5132 in MemHT Portal 4.0.1, leveraging SQL injection via the 'X-Forwarded-For' header to write a PHP shell to the server. It includes path discovery and bruteforce mechanisms to locate the correct server path.

Classification

Working Poc 95%

Attack Type

Sqli

Complexity

Moderate

Reliability

Reliable

Target: MemHT Portal 4.0.1

No auth needed

Prerequisites: MySQL file write permissions · knowledge of server path or ability to brute-force it

MITRE ATT&CK