CVE-2010-1365
Uiga Fan Club - SQL Injection via id Parameter in photos Action
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2010-1365. PoCs published by Sioma Labs, Easy Laster.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Uiga Fan Club software, allowing an attacker to extract admin credentials via a crafted URL parameter. The example provided uses a UNION-based SQLi to dump the admin table.
Description
SQL injection vulnerability in index.php in Uiga Fan Club, as downloaded on 20100310, allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action.
Exploits (2)
This exploit demonstrates a SQL injection vulnerability in Uiga Fan Club software, allowing an attacker to extract admin credentials via a crafted URL parameter. The example provided uses a UNION-based SQLi to dump the admin table.
This is a writeup describing a SQL injection vulnerability in Uigafanclub's index.php. It provides a proof-of-concept exploit URL that leverages a UNION-based SQL injection to extract admin credentials from the database.