CVE-2008-6802
phPhotoGallery 0.92 - SQL Injection via Username and Password Fields
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-6802. PoCs published by KnocKout.
AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in phPhotoGallery 0.92 by providing malicious input for the username and password fields, bypassing authentication. The payload uses a classic SQLi technique to manipulate the query logic.
Description
Multiple SQL injection vulnerabilities in index.php in phPhotoGallery 0.92 allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploits (1)
This exploit demonstrates an SQL injection vulnerability in phPhotoGallery 0.92 by providing malicious input for the username and password fields, bypassing authentication. The payload uses a classic SQLi technique to manipulate the query logic.