Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-2310. PoCs published by dun.
AI-analyzed exploit summary This Perl script exploits a SQL injection vulnerability in X-BLC CMS version 0.2.0 by extracting user credentials (id, login_name, password, email, status) via a UNION-based attack. It iterates through each character of the target fields using ORD and SUBSTRING functions.
Description
SQL injection vulnerability in include/get_read.php in Extensible-BioLawCom CMS (X-BLC) 0.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the section parameter.
Exploits (1)
This Perl script exploits a SQL injection vulnerability in X-BLC CMS version 0.2.0 by extracting user credentials (id, login_name, password, email, status) via a UNION-based attack. It iterates through each character of the target fields using ORD and SUBSTRING functions.