Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-3059. PoCs published by Inj3ct0r.
AI-analyzed exploit summary This exploit demonstrates SQL injection and XSS vulnerabilities in JBoard <= 2.0. The SQLi allows unauthorized data access via the 'city' parameter, while XSS is achievable through unsanitized input in multiple endpoints.
Description
Multiple SQL injection vulnerabilities in Joker Board (aka JBoard) 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via (1) core/select.php or (2) the city parameter to top_add.inc.php, reachable through sboard.php.
Exploits (1)
This exploit demonstrates SQL injection and XSS vulnerabilities in JBoard <= 2.0. The SQLi allows unauthorized data access via the 'city' parameter, while XSS is achievable through unsanitized input in multiple endpoints.