Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-5599. PoCs published by ZoRLu.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability and an authentication bypass in Merlix Teamworx Server. The directory traversal allows unauthorized access to the database file, while the authentication bypass uses a simple SQL injection technique.
Description
SQL injection vulnerability in default.asp in Merlix Teamworx Server allows remote attackers to execute arbitrary SQL commands via the password parameter (aka passwd field) in a login action. NOTE: some of these details are obtained from third party information.
Exploits (1)
This exploit demonstrates a directory traversal vulnerability and an authentication bypass in Merlix Teamworx Server. The directory traversal allows unauthorized access to the database file, while the authentication bypass uses a simple SQL injection technique.