CVE-2008-5952
KTP Computer Customer Database - Authenticated SQL Injection via tid Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-5952. PoCs published by CWH Underground.
AI-analyzed exploit summary The exploit demonstrates a blind SQL injection vulnerability in KTPCCD CMS by manipulating the 'tid' parameter in a URL. It includes proof-of-concept payloads to verify the vulnerability by checking the MySQL version.
Description
SQL injection vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the tid parameter in a vtech action to the default URI.
Exploits (1)
The exploit demonstrates a blind SQL injection vulnerability in KTPCCD CMS by manipulating the 'tid' parameter in a URL. It includes proof-of-concept payloads to verify the vulnerability by checking the MySQL version.