CVE-2008-6788
MindDezign Photo Gallery 2.2 - SQL Injection via id Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-6788. PoCs published by CWH Underground.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in MindDezign Photo Gallery 2.2 via the 'id' parameter in index.php. It bypasses authentication by injecting a UNION-based query to extract admin credentials from the database.
Description
SQL injection vulnerability in MindDezign Photo Gallery 2.2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in an info action to index.php.
Exploits (2)
This exploit demonstrates a SQL injection vulnerability in MindDezign Photo Gallery 2.2 via the 'id' parameter in index.php. It bypasses authentication by injecting a UNION-based query to extract admin credentials from the database.
This Perl script exploits an authentication bypass vulnerability in MindDezign Photo Gallery 2.2 by injecting a SQL query to bypass admin login, then adds an arbitrary admin user. It requires magic_quotes_gpc to be off.