Exploitation Summary
EIP tracks 2 public exploits for CVE-2009-3973. PoCs published by Red-D3v1L, The_5p3ctrum.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Arcad site Script, allowing an attacker to extract user credentials (password and username) via a crafted UNION-based SQL query. The PoC provides a direct URL with the malicious payload, confirming its functionality.
Description
SQL injection vulnerability in index.php in Turnkey Arcade Script allows remote attackers to execute arbitrary SQL commands via the id parameter in a browse action, a different vector than CVE-2008-5629.
Exploits (2)
This exploit demonstrates a SQL injection vulnerability in Arcad site Script, allowing an attacker to extract user credentials (password and username) via a crafted UNION-based SQL query. The PoC provides a direct URL with the malicious payload, confirming its functionality.
This exploit demonstrates a SQL injection vulnerability in the Turnkey Arcade Script's index.php file. The vulnerability allows an attacker to extract sensitive information such as usernames and passwords from the database via a crafted URL.