Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-2451. PoCs published by YEnH4ckEr.
AI-analyzed exploit summary This exploit demonstrates multiple SQL injection vulnerabilities in MIM:InfiniX v1.2.003. It provides proof-of-concept URLs to extract database information and admin credentials by manipulating GET parameters like 'month' and 'year'.
Description
Multiple SQL injection vulnerabilities in index.php in MIM:InfiniX 1.2.003 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters in a calendar action, or (3) a search term in the search form.
Exploits (1)
This exploit demonstrates multiple SQL injection vulnerabilities in MIM:InfiniX v1.2.003. It provides proof-of-concept URLs to extract database information and admin credentials by manipulating GET parameters like 'month' and 'year'.