Exploitation Summary
EIP tracks 2 public exploits for CVE-2008-6427. PoCs published by security fears team, K-159.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Hivemaker script, allowing an attacker to extract sensitive user information (username, password, email) via a crafted UNION-based SQL query.
Description
SQL injection vulnerability in index.php in Hivemaker Professional 1.0.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cid parameter.
Exploits (2)
This exploit demonstrates a SQL injection vulnerability in Hivemaker script, allowing an attacker to extract sensitive user information (username, password, email) via a crafted UNION-based SQL query.
This exploit demonstrates a SQL injection vulnerability in HiveMaker Professional <= 1.0.2 via the 'cid' parameter in index.php. It allows remote attackers to retrieve user credentials and session IDs when magic_quotes is disabled.