Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-6477. PoCs published by Lidloses_Auge.
AI-analyzed exploit summary This PHP script exploits a blind SQL injection vulnerability in Mumbo Jumbo Media's OP4 CMS by brute-forcing the admin username and password hash via time-based inference. It iterates through possible ASCII values to extract data from the database.
Description
SQL injection vulnerability in Mumbo Jumbo Media OP4 allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.
Exploits (1)
This PHP script exploits a blind SQL injection vulnerability in Mumbo Jumbo Media's OP4 CMS by brute-forcing the admin username and password hash via time-based inference. It iterates through possible ASCII values to extract data from the database.