Exploitation Summary
EIP tracks 2 public exploits for CVE-2010-4980. PoCs published by Salvatore Fresta, Vulnerability-Lab.
AI-analyzed exploit summary The document describes a SQL injection vulnerability in iScripts ReserveLogic 1.0, specifically in the 'pid' parameter of packagedetails.php. It provides a sample exploit URL but lacks executable code.
Description
SQL injection vulnerability in packagedetails.php in iScripts ReserveLogic 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter.
Exploits (2)
The document describes a SQL injection vulnerability in iScripts ReserveLogic 1.0, specifically in the 'pid' parameter of packagedetails.php. It provides a sample exploit URL but lacks executable code.
This is a detailed vulnerability report for CVE-2010-4980, describing multiple SQL injection, arbitrary file upload, and XSS vulnerabilities in iScripts Reserve Logic v1.2 Booking CMS. It includes vulnerable files, parameters, and proof-of-concept examples.