Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-1583. PoCs published by Justin C. Klein Keane.
AI-analyzed exploit summary The writeup details a SQL injection vulnerability in the Tirzen Framework's TznDbConnection class, specifically in the loadByKey() function, which fails to sanitize user input. This flaw allows attackers to bypass authentication in Task Freak Multi User by injecting malicious SQL queries.
Description
SQL injection vulnerability in the loadByKey function in the TznDbConnection class in tzn_mysql.php in Tirzen (aka TZN) Framework 1.5, as used in TaskFreak! before 0.6.3, allows remote attackers to execute arbitrary SQL commands via the username field in a login action.
Exploits (1)
The writeup details a SQL injection vulnerability in the Tirzen Framework's TznDbConnection class, specifically in the loadByKey() function, which fails to sanitize user input. This flaw allows attackers to bypass authentication in Task Freak Multi User by injecting malicious SQL queries.