Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-4800. PoCs published by John Leitch.
AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in BaconMap 1.0, allowing an attacker to insert arbitrary data into the database via a crafted HTTP request. The PoC directly injects a new user record with a specified email, privilege level, and password.
Description
SQL injection vulnerability in doadd.php in BaconMap 1.0 allows remote attackers to execute arbitrary SQL commands via the type parameter.
Exploits (1)
This exploit demonstrates an SQL injection vulnerability in BaconMap 1.0, allowing an attacker to insert arbitrary data into the database via a crafted HTTP request. The PoC directly injects a new user record with a specified email, privilege level, and password.