Exploitation Summary
EIP tracks 2 public exploits for CVE-2009-2428. PoCs published by Moudi.
AI-analyzed exploit summary The exploit demonstrates a SQL injection vulnerability in Tausch Ticket Script by injecting malicious input into the 'descr' parameter of the 'vote.php' endpoint. This allows an attacker to manipulate SQL queries and potentially access or modify data in the underlying database.
Description
Multiple SQL injection vulnerabilities in Tausch Ticket Script 3 allow remote attackers to execute arbitrary SQL commands via the (1) userid parameter to suchauftraege_user.php and the (2) descr parameter to vote.php; and other unspecified vectors.
Exploits (2)
The exploit demonstrates a SQL injection vulnerability in Tausch Ticket Script by injecting malicious input into the 'descr' parameter of the 'vote.php' endpoint. This allows an attacker to manipulate SQL queries and potentially access or modify data in the underlying database.
The provided text describes a SQL injection vulnerability in Tausch Ticket Script 3, where the 'userid' parameter in 'suchauftraege_user.php' is not properly sanitized. It references a SecurityFocus BID but does not include functional exploit code.