Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-4917. PoCs published by Ptrace Security.
AI-analyzed exploit summary This exploit targets a SQL injection vulnerability in A-Blog v2.0's search.php, leveraging unsanitized input in the 'words' GET parameter to extract administrator credentials via a UNION-based attack. The payload bypasses whitespace filtering by using URL-encoded comments and operators.
Description
SQL injection vulnerability in sources/search.php in A-Blog 2.0 allows remote attackers to execute arbitrary SQL commands via the words parameter.
Exploits (1)
This exploit targets a SQL injection vulnerability in A-Blog v2.0's search.php, leveraging unsanitized input in the 'words' GET parameter to extract administrator credentials via a UNION-based attack. The payload bypasses whitespace filtering by using URL-encoded comments and operators.