Exploitation Summary
EIP tracks 2 public exploits for CVE-2008-6582. PoCs published by bizzit, HaCkeR_EgY.
AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in Miniweb 2.0, allowing an attacker to bypass authentication by injecting 'union select 1#' into the username field. The exploit grants admin access without requiring valid credentials.
Description
SQL injection vulnerability in index.php in Miniweb 2.0 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action.
Exploits (2)
This exploit demonstrates an SQL injection vulnerability in Miniweb 2.0, allowing an attacker to bypass authentication by injecting 'union select 1#' into the username field. The exploit grants admin access without requiring valid credentials.
This exploit demonstrates a SQL injection vulnerability in Miniweb 2.0's index.php, specifically in the 'historymonth' parameter. The PoC uses a UNION-based SQLi to extract admin credentials (user_id, username, password) from the 'admin_access' table.