Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-3217. PoCs published by SirGod.
AI-analyzed exploit summary This exploit demonstrates Local File Inclusion (LFI) and SQL Injection vulnerabilities in iWiccle 1.01. The LFI allows reading arbitrary files via path traversal, while the SQLi extracts user credentials from the database.
Description
SQL injection vulnerability in the admin module in iWiccle 1.01 allows remote attackers to execute arbitrary SQL commands via the member_id parameter in an edit_user action to index.php.
Exploits (1)
This exploit demonstrates Local File Inclusion (LFI) and SQL Injection vulnerabilities in iWiccle 1.01. The LFI allows reading arbitrary files via path traversal, while the SQLi extracts user credentials from the database.