Exploitation Summary
EIP tracks 2 public exploits for CVE-2008-5571. PoCs published by ZoRLu.
AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in Professional Download Assistant 0.1 by providing a malformed password input that bypasses authentication. The payload ' or ' is a classic SQLi technique to manipulate the query logic.
Description
SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execute arbitrary SQL commands via the (1) uname parameter (aka user field) or the (2) psw parameter (aka passwd field). NOTE: some of these details are obtained from third party information.
Exploits (2)
This exploit demonstrates an SQL injection vulnerability in Professional Download Assistant 0.1 by providing a malformed password input that bypasses authentication. The payload ' or ' is a classic SQLi technique to manipulate the query logic.
This is a writeup describing an authentication bypass vulnerability in Professional Download Assistant 0.1 via SQL injection. The provided credentials demonstrate the exploit but no functional code is included.