Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-0543. PoCs published by gat3way.
AI-analyzed exploit summary This writeup describes an SQL injection vulnerability in ProFTPD's SQL authentication mechanism. The exploit leverages improper handling of the '%' character to bypass authentication by injecting a malicious SQL query into the username field.
Description
ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection protection mechanisms via invalid, encoded multibyte characters, which are not properly handled in (1) mod_sql_mysql and (2) mod_sql_postgres.
Exploits (1)
This writeup describes an SQL injection vulnerability in ProFTPD's SQL authentication mechanism. The exploit leverages improper handling of the '%' character to bypass authentication by injecting a malicious SQL query into the username field.