CVE-2008-6422

Psychostats 2.3, 2.3.1, 2.3.3 - SQL Injection via id Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-6422. PoCs published by Mr.SQL.

AI-analyzed exploit summary This is a writeup detailing SQL injection vulnerabilities in PsychoStats versions 2.3, 2.3.1, and 2.3.3. It provides specific SQLi payloads for the 'weapon.php' and 'map.php' endpoints to extract database information.

Description

Multiple SQL injection vulnerabilities in PsychoStats 2.3, 2.3.1, and 2.3.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) weapon.php and (2) map.php.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Mr.SQL · textwebappsphp

https://www.exploit-db.com/exploits/5699

View Code ZIP pw:eip

This is a writeup detailing SQL injection vulnerabilities in PsychoStats versions 2.3, 2.3.1, and 2.3.3. It provides specific SQLi payloads for the 'weapon.php' and 'map.php' endpoints to extract database information.

Classification

Writeup 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: PsychoStats (v2.3, v2.3.1, v2.3.3)

No auth needed

Prerequisites: Target running vulnerable PsychoStats version · Access to the 'weapon.php' or 'map.php' endpoints

MITRE ATT&CK