CVE-2008-5782
ZeeMatri 3.0 - SQL Injection via bannerclick.php adid Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-5782. PoCs published by Hussin X.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in ZeeMatri v3.0 via the 'adid' parameter in bannerclick.php, allowing an attacker to extract admin credentials (name and password) from the database. The payload uses a UNION-based SQLi technique to concatenate and retrieve sensitive data.
Description
SQL injection vulnerability in bannerclick.php in ZeeMatri 3.0 allows remote attackers to execute arbitrary SQL commands via the adid parameter.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in ZeeMatri v3.0 via the 'adid' parameter in bannerclick.php, allowing an attacker to extract admin credentials (name and password) from the database. The payload uses a UNION-based SQLi technique to concatenate and retrieve sensitive data.