Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-1778. PoCs published by YEnH4ckEr.
AI-analyzed exploit summary This exploit targets a SQL injection vulnerability in Bigace CMS 2.5's user registration module. It allows an attacker to change user options, including passwords, by leveraging the 'ON DUPLICATE KEY UPDATE' SQL clause.
Description
SQL injection vulnerability in the new user registration feature in BigACE CMS 2.5, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter.
Exploits (1)
This exploit targets a SQL injection vulnerability in Bigace CMS 2.5's user registration module. It allows an attacker to change user options, including passwords, by leveraging the 'ON DUPLICATE KEY UPDATE' SQL clause.