CVE-2008-5496

PozScripts Business Directory Script - SQL Injection

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-5496. PoCs published by Hussin X.

AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Business Directory Script via the 'cid' parameter in showcategory.php. The PoC extracts database user and version information using a UNION-based SQLi technique.

Description

SQL injection vulnerability in showcategory.php in PozScripts Business Directory Script allows remote attackers to execute arbitrary SQL commands via the cid parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Hussin X · textwebappsphp

https://www.exploit-db.com/exploits/7098

View Code ZIP pw:eip

This exploit demonstrates a SQL injection vulnerability in Business Directory Script via the 'cid' parameter in showcategory.php. The PoC extracts database user and version information using a UNION-based SQLi technique.

Classification

Working Poc 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: Business Directory Script (version not specified)

No auth needed

Prerequisites: Target application must be running Business Directory Script with vulnerable showcategory.php endpoint

MITRE ATT&CK