Exploitation Summary
EIP tracks 2 public exploits for CVE-2008-6795. PoCs published by Cyber-Zone, StAkeR.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Vibro-School CMS via the 'nID' parameter in view_news.php. The PoC uses a UNION-based SQLi to extract database version information.
Description
SQL injection vulnerability in view_news.php in nicLOR Vibro-School-CMS allows remote attackers to execute arbitrary SQL commands via the nID parameter.
Exploits (2)
This exploit demonstrates a SQL injection vulnerability in Vibro-School CMS via the 'nID' parameter in view_news.php. The PoC uses a UNION-based SQLi to extract database version information.
This exploit demonstrates SQL injection vulnerabilities in Vibro-CMS by injecting malicious SQL queries into URL parameters. It extracts database information such as user, version, and database name without requiring authentication.