Exploitation Summary
EIP tracks 2 public exploits for CVE-2008-5489. PoCs published by Esac, snakespc.
AI-analyzed exploit summary The exploit demonstrates multiple blind SQL injection vulnerabilities in ClipShare 4.1.4 by manipulating input parameters (e.g., gid, chid, UID) in various PHP files. The PoC uses boolean-based conditions (AND 1=1/AND 1=2) to confirm vulnerability via differential page responses.
Description
SQL injection vulnerability in channel_detail.php in ClipShare Pro 4, and 2006 through 2007, allows remote attackers to execute arbitrary SQL commands via the chid parameter.
Exploits (2)
The exploit demonstrates multiple blind SQL injection vulnerabilities in ClipShare 4.1.4 by manipulating input parameters (e.g., gid, chid, UID) in various PHP files. The PoC uses boolean-based conditions (AND 1=1/AND 1=2) to confirm vulnerability via differential page responses.
This exploit demonstrates a SQL injection vulnerability in clipShare's channel_detail.php, allowing an attacker to extract user credentials (username and password) from the signup table via a UNION-based attack.