Exploitation Summary
EIP tracks 3 public exploits for CVE-2010-1270. PoCs published by Easy Laster.
AI-analyzed exploit summary This is a Python-based blind SQL injection exploit targeting Multi Auktions Komplett System V2. It extracts user credentials (passwords, usernames, emails) by brute-forcing character-by-character via ASCII comparisons in SQL queries.
Description
SQL injection vulnerability in auktion.php in Multi Auktions Komplett System 2 allows remote attackers to execute arbitrary SQL commands via the id_auk parameter.
Exploits (3)
This is a Python-based blind SQL injection exploit targeting Multi Auktions Komplett System V2. It extracts user credentials (passwords, usernames, emails) by brute-forcing character-by-character via ASCII comparisons in SQL queries.
This is a writeup describing a blind SQL injection vulnerability in phpscripte24 Niedrig Gebote Pro Auktions System II. It provides example URLs to exploit the vulnerability in the `auktion.php` file by manipulating the `id_auk` parameter.
This is a writeup describing a blind SQL injection vulnerability in phpscripte24 Auktionshaus Community Standart System. It provides an example exploit URL to extract the admin password hash via substring manipulation.