Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-4940. PoCs published by Br0ly.
AI-analyzed exploit summary This Perl script exploits a SQL injection vulnerability in Zeus Cart V2.3 by injecting a UNION-based SQL query to extract admin credentials from the database. The exploit targets the 'maincatid' parameter in the 'showmaincatlanding' action and decodes the retrieved base64-encoded password.
Description
SQL injection vulnerability in index.php in Zeus Cart 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the maincatid parameter in a showmaincatlanding action.
Exploits (1)
This Perl script exploits a SQL injection vulnerability in Zeus Cart V2.3 by injecting a UNION-based SQL query to extract admin credentials from the database. The exploit targets the 'maincatid' parameter in the 'showmaincatlanding' action and decodes the retrieved base64-encoded password.