CVE-2008-6917
ExoPHPDesk 1.2 Final - SQL Injection via Username Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-6917. PoCs published by Cyber-Zone.
AI-analyzed exploit summary This is a writeup describing an authentication bypass vulnerability in ExoPHPDesk v1.2 Final via SQL injection. It provides a simple payload to bypass login credentials.
Description
SQL injection vulnerability in admin.php in Exocrew ExoPHPDesk 1.2 Final allows remote attackers to execute arbitrary SQL commands via the username (user parameter).
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by Cyber-Zone · textwebappsphp
https://www.exploit-db.com/exploits/7071
This is a writeup describing an authentication bypass vulnerability in ExoPHPDesk v1.2 Final via SQL injection. It provides a simple payload to bypass login credentials.
Classification
Writeup 90%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target:
ExoPHPDesk v1.2 Final
No auth needed
Prerequisites:
Access to the login page of the target application
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (5)
Core 5
Core References
Vendor Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/3064
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/27638
Exploit, Third Party Advisory exploit
x_refsource_exploit-db
https://www.exploit-db.com/exploits/7071
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/46493
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/32220
Scores
EPSS
0.0100
EPSS Percentile
58.4%
Details
CWE
CWE-89
Status
published
Products (1)
exoscripts/exophpdesk
1.2
Published
Aug 07, 2009
Tracked Since
Feb 18, 2026