Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-1810. PoCs published by YEnH4ckEr.
AI-analyzed exploit summary This exploit demonstrates multiple vulnerabilities in myColex 1.4.2, including SQL injection, authentication bypass, and XSS. It provides functional proof-of-concept URLs and payloads to exploit these issues.
Description
Multiple SQL injection vulnerabilities in myColex 1.4.2 allow remote attackers to execute arbitrary SQL commands via (1) the formUser parameter (aka the Name field) to common/login.php, and allow remote authenticated users to execute arbitrary SQL commands via the ID parameter in a Detail action to (2) kategorie.php, (3) medium.php, (4) person.php, or (5) schlagwort.php in modules/, related to classes/class.perform.php.
Exploits (1)
This exploit demonstrates multiple vulnerabilities in myColex 1.4.2, including SQL injection, authentication bypass, and XSS. It provides functional proof-of-concept URLs and payloads to exploit these issues.