CVE-2009-3500
BPowerHouse BPGames 1.0 - SQL Injection via cat_id or game_id Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2009-3500. PoCs published by OoN Boy.
AI-analyzed exploit summary This exploit demonstrates a blind SQL injection vulnerability in BPGames 1.0. It uses time-based techniques to extract data from the database by iterating through possible characters for each position in the target column.
Description
Multiple SQL injection vulnerabilities in BPowerHouse BPGames 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) cat_id parameter to main.php and (2) game_id parameter to game.php.
Exploits (1)
This exploit demonstrates a blind SQL injection vulnerability in BPGames 1.0. It uses time-based techniques to extract data from the database by iterating through possible characters for each position in the target column.