Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-6392. PoCs published by Pouya_Server.
AI-analyzed exploit summary The entry describes SQL injection and XSS vulnerabilities in Z1Exchange 1.0 due to insufficient input sanitization. It provides a high-level overview of potential impacts but lacks detailed technical analysis or exploit code.
Description
SQL injection vulnerability in showads.php in Z1Exchange allows remote attackers to execute arbitrary SQL commands via the id parameter.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by Pouya_Server · textwebappsphp
https://www.exploit-db.com/exploits/32633
The entry describes SQL injection and XSS vulnerabilities in Z1Exchange 1.0 due to insufficient input sanitization. It provides a high-level overview of potential impacts but lacks detailed technical analysis or exploit code.
Classification
Writeup 90%
Attack Type
Sqli | Xss
Complexity
Trivial
Reliability
Theoretical
Target:
Z1Exchange 1.0
No auth needed
Prerequisites:
Access to the vulnerable web application
devstral-2 · analyzed Feb 18, 2026
Full analysis →
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/32598
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/46938
Exploit x_refsource_misc
http://packetstormsecurity.org/0812-exploits/z1exchange-sqlxss.txt
Scores
EPSS
0.0097
EPSS Percentile
57.1%
Details
CWE
CWE-89
Status
published
Products (1)
1scripts/z1exchange
1.0
Published
Mar 02, 2009
Tracked Since
Feb 18, 2026