CVE-2008-5653

MyioSoft AjaxPortal 3.0 - SQL Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-5653. PoCs published by ZoRLu.

AI-analyzed exploit summary This exploit demonstrates an authentication bypass vulnerability in MyioSoft Ajax Portal 3.0 via SQL injection in the login form. The attacker can bypass authentication by injecting a tautology into the username field.

Description

SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft AjaxPortal 3.0 allows remote attackers to execute arbitrary SQL commands via the rsargs parameter, as reachable through the username parameter. NOTE: some of these details are obtained from third party information.

Exploits (1)

exploitdb WORKING POC VERIFIED
by ZoRLu · textwebappsphp
https://www.exploit-db.com/exploits/7044

This exploit demonstrates an authentication bypass vulnerability in MyioSoft Ajax Portal 3.0 via SQL injection in the login form. The attacker can bypass authentication by injecting a tautology into the username field.

Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: MyioSoft Ajax Portal 3.0
No auth needed
Prerequisites: knowledge of the admin username
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/7044
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/49700
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/32673
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/32199

Scores

EPSS 0.0101
EPSS Percentile 58.6%

Details

CWE
CWE-89
Status published
Products (1)
myiosoft.com/ajaxportal 3.0
Published Dec 17, 2008
Tracked Since Feb 18, 2026