CVE-2008-5191

This Metasploit module exploits a SQL injection vulnerability in SePortal 2.5 to retrieve the admin session ID and upload arbitrary PHP code for remote code execution.

This is a writeup describing a SQL injection vulnerability in SePortal 2.5. It provides details on vulnerable parameters and example exploit URLs but does not include functional exploit code.

This exploit demonstrates a SQL injection vulnerability in SePortal V2.4 via the 'poll_id' and 'sp_id' parameters. It allows an attacker to extract user credentials from the database using a UNION-based SQL injection technique.

This Metasploit module exploits a SQL injection vulnerability in SePortal 2.5 to retrieve an admin session ID, then uploads a malicious PHP payload to achieve remote code execution.