Exploitation Summary
EIP tracks 2 public exploits for CVE-2009-0326. PoCs published by darkjoker.
AI-analyzed exploit summary The provided text describes an SQL injection vulnerability in Dark Age CMS 0.2c beta, where unsanitized user input in the login form allows authentication bypass using a classic SQLi payload. No actual exploit code is present, only a conceptual example.
Description
SQL injection vulnerability in login.php in Dark Age CMS 0.2c beta allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploits (2)
The provided text describes an SQL injection vulnerability in Dark Age CMS 0.2c beta, where unsanitized user input in the login form allows authentication bypass using a classic SQLi payload. No actual exploit code is present, only a conceptual example.
This exploit demonstrates an SQL injection vulnerability in Dark Age CMS <= v0.2c Beta, allowing authentication bypass via a crafted username input. The payload manipulates the SQL query to return a true condition, bypassing password verification.