CVE-2008-5191
SePortal 2.4 - SQL Injection via poll_id or sp_id Parameter
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2008-5191.
PoCs published by Metasploit, jsass, Mr.SQL, including Metasploit module exploits/unix/webapp/seportal_sqli_exec.
AI-analyzed exploit summary This Metasploit module exploits a SQL injection vulnerability in SePortal 2.5 to retrieve the admin session ID and upload arbitrary PHP code for remote code execution.
Description
Multiple SQL injection vulnerabilities in SePortal 2.4 allow remote attackers to execute arbitrary SQL commands via the (1) poll_id parameter to poll.php and the (2) sp_id parameter to staticpages.php.
Exploits (4)
This Metasploit module exploits a SQL injection vulnerability in SePortal 2.5 to retrieve the admin session ID and upload arbitrary PHP code for remote code execution.
This is a writeup describing a SQL injection vulnerability in SePortal 2.5. It provides details on vulnerable parameters and example exploit URLs but does not include functional exploit code.
This exploit demonstrates a SQL injection vulnerability in SePortal V2.4 via the 'poll_id' and 'sp_id' parameters. It allows an attacker to extract user credentials from the database using a UNION-based SQL injection technique.
This Metasploit module exploits a SQL injection vulnerability in SePortal 2.5 to retrieve an admin session ID, then uploads a malicious PHP payload to achieve remote code execution.