Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-4940. PoCs published by BrOx-Dz.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in WAnewsletter v2.1.2, allowing an attacker to extract admin credentials via a crafted UNION SELECT query. The PoC provides a direct URL to retrieve the username and password from the wa_admin table.
Description
SQL injection vulnerability in index.php in WAnewsletter 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in WAnewsletter v2.1.2, allowing an attacker to extract admin credentials via a crafted UNION SELECT query. The PoC provides a direct URL to retrieve the username and password from the wa_admin table.