CVE-2010-2609

2daybiz Job Search Engine Script - SQL Injection via show_search_result.php keyword parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2010-2609. PoCs published by L0rd CrusAd3r.

AI-analyzed exploit summary This is a writeup describing a SQL injection vulnerability in the 2daybiz Job Search Engine Script. The vulnerability allows an attacker to inject malicious SQL queries via the 'keyword' parameter in the 'show_search_result.php' script.

Description

SQL injection vulnerability in show_search_result.php in 2daybiz Job Search Engine Script allows remote attackers to execute arbitrary SQL commands via the keyword parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED

by L0rd CrusAd3r · textwebappsphp

https://www.exploit-db.com/exploits/13978

View Code ZIP pw:eip

This is a writeup describing a SQL injection vulnerability in the 2daybiz Job Search Engine Script. The vulnerability allows an attacker to inject malicious SQL queries via the 'keyword' parameter in the 'show_search_result.php' script.

Classification

Writeup 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: 2daybiz Job Search Engine Script version 1

No auth needed

Prerequisites: Access to the vulnerable URL

MITRE ATT&CK