Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-3029. PoCs published by garwga.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in PHPKick v0.8's statistics.php, allowing an attacker to extract user credentials (username and password hash) via a crafted UNION-based SQL query. The exploit bypasses common PHP security settings like magic_quotes and register_globals.
Description
SQL injection vulnerability in statistics.php in PHPKick 0.8 allows remote attackers to execute arbitrary SQL commands via the gameday parameter in an overview action.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in PHPKick v0.8's statistics.php, allowing an attacker to extract user credentials (username and password hash) via a crafted UNION-based SQL query. The exploit bypasses common PHP security settings like magic_quotes and register_globals.