Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-6952. PoCs published by StAkeR.
AI-analyzed exploit summary This exploit targets MauryCMS <= 0.53.2 by leveraging SQL injection to extract admin credentials and then uploading a malicious PHP shell via an authenticated file upload vulnerability. The script automates the process of retrieving session cookies and uploading the shell.
Description
SQL injection vulnerability in Rss.php in MauryCMS 0.53.2 and earlier allows remote attackers to execute arbitrary SQL commands via the c parameter.
Exploits (1)
This exploit targets MauryCMS <= 0.53.2 by leveraging SQL injection to extract admin credentials and then uploading a malicious PHP shell via an authenticated file upload vulnerability. The script automates the process of retrieving session cookies and uploading the shell.