CVE-2008-5781
Cant Find A Gaming CMS (CFAGCMS) 1.0 Beta 1 - SQL Injection
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-5781. PoCs published by cr4wl3r, ZoRLu.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in CFAGCMS via the 'title' parameter in 'right.php'. The PoC shows how an attacker can inject arbitrary SQL queries due to improper input sanitization.
Description
SQL injection vulnerability in right.php in Cant Find A Gaming CMS (CFAGCMS) 1.0 Beta 1 allows remote attackers to execute arbitrary SQL commands via the title parameter.
Exploits (2)
This exploit demonstrates a SQL injection vulnerability in CFAGCMS via the 'title' parameter in 'right.php'. The PoC shows how an attacker can inject arbitrary SQL queries due to improper input sanitization.
This exploit demonstrates a SQL injection vulnerability in cfagcms Beta 1 via the 'title' parameter in 'right.php'. The payload extracts database information including user, database name, and version.