Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-2614. PoCs published by R3d-D3V!L.
AI-analyzed exploit summary This exploit demonstrates an authentication bypass via SQL injection in LinkPal v1.0. The payload 'X' or ' 1=1--' bypasses login by manipulating the SQL query to always return true.
Description
SQL injection vulnerability in z_admin_login.asp in DataCheck Solutions LinkPal 1.x allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploits (1)
This exploit demonstrates an authentication bypass via SQL injection in LinkPal v1.0. The payload 'X' or ' 1=1--' bypasses login by manipulating the SQL query to always return true.