Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-4770. PoCs published by JaMbA.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in DVD Rental Software, allowing an attacker to extract admin credentials via a crafted URL. The PoC uses a UNION-based SQLi to concatenate and retrieve the admin username and password from the rental_admin table.
Description
SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a catalog action.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in DVD Rental Software, allowing an attacker to extract admin credentials via a crafted URL. The PoC uses a UNION-based SQLi to concatenate and retrieve the admin username and password from the rental_admin table.