CVE-2009-1613
Leap CMS 0.1.4 - SQL Injection via Searchterm or Email Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2009-1613. PoCs published by YEnH4ckEr.
AI-analyzed exploit summary This exploit demonstrates multiple vulnerabilities in Leap CMS 0.1.4, including SQL injection for authentication bypass, XSS for cookie stealing, and shell upload. The PoC provides clear steps and payloads for each vulnerability.
Description
Multiple SQL injection vulnerabilities in leap.php in Leap CMS 0.1.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) searchterm or (2) email parameter.
Exploits (2)
This exploit demonstrates multiple vulnerabilities in Leap CMS 0.1.4, including SQL injection for authentication bypass, XSS for cookie stealing, and shell upload. The PoC provides clear steps and payloads for each vulnerability.
This Perl script exploits a blind SQL injection vulnerability in Leap CMS 0.1.4 by injecting malicious payloads into the search functionality. It automates the extraction of user data (e.g., email) by brute-forcing character values.