Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-2674. PoCs published by d3v1l.
AI-analyzed exploit summary This exploit demonstrates SQL injection and XSS vulnerabilities in TSOKA:CMS versions 1.1, 1.9, and 2.0. It provides example URLs to exploit the vulnerabilities, including a UNION-based SQL injection to extract database information.
Description
SQL injection vulnerability in index.php in TSOKA:CMS 1.1, 1.9, and 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in an articolo action.
Exploits (1)
This exploit demonstrates SQL injection and XSS vulnerabilities in TSOKA:CMS versions 1.1, 1.9, and 2.0. It provides example URLs to exploit the vulnerabilities, including a UNION-based SQL injection to extract database information.