Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-6312. PoCs published by Osirys.
AI-analyzed exploit summary The exploit details a SQL injection vulnerability in ProQuiz 1.0's admin login page, allowing authentication bypass via crafted input. The analysis includes vulnerable code snippets and a step-by-step exploitation method.
Description
SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via the username parameter.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by Osirys · textwebappsphp
https://www.exploit-db.com/exploits/7397
The exploit details a SQL injection vulnerability in ProQuiz 1.0's admin login page, allowing authentication bypass via crafted input. The analysis includes vulnerable code snippets and a step-by-step exploitation method.
Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:
ProQuiz 1.0
No auth needed
Prerequisites:
Access to the admin login page
devstral-2 · analyzed Feb 18, 2026
Full analysis →
References (3)
Core 3
Core References
Exploit, Third Party Advisory exploit
x_refsource_exploit-db
https://www.exploit-db.com/exploits/7397
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/32724
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/47196
Scores
EPSS
0.0110
EPSS Percentile
61.4%
Details
CWE
CWE-89
Status
published
Products (1)
manzovi/proquiz
1.0
Published
Feb 27, 2009
Tracked Since
Feb 18, 2026