Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-3481. PoCs published by Abysssec.
AI-analyzed exploit summary The exploit demonstrates an authentication bypass via SQL injection in the login mechanism and a local file inclusion vulnerability in PHP MicroCMS 1.0.1. The SQL injection allows bypassing authentication by injecting malicious input into the username and password fields, while the LFI allows reading arbitrary files by manipulating the 'page' parameter.
Description
Multiple SQL injection vulnerabilities in login.php in ApPHP PHP MicroCMS 1.0.1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) user_name and (2) password variables, possibly related to include/classes/Login.php. NOTE: some of these details are obtained from third party information. NOTE: the password vector might not be vulnerable.
Exploits (1)
The exploit demonstrates an authentication bypass via SQL injection in the login mechanism and a local file inclusion vulnerability in PHP MicroCMS 1.0.1. The SQL injection allows bypassing authentication by injecting malicious input into the username and password fields, while the LFI allows reading arbitrary files by manipulating the 'page' parameter.