Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-5041. PoCs published by AntiSecurity.
AI-analyzed exploit summary The exploit demonstrates a Remote File Inclusion (RFI) vulnerability and SQL Injection (SQLi) in NP_Gallery version 0.94. It provides URLs to exploit these vulnerabilities, including a union-based SQLi to dump user credentials.
Description
SQL injection vulnerability in index.php in the NP_Gallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary SQL commands via the id parameter in a plugin action.
Exploits (1)
The exploit demonstrates a Remote File Inclusion (RFI) vulnerability and SQL Injection (SQLi) in NP_Gallery version 0.94. It provides URLs to exploit these vulnerabilities, including a union-based SQLi to dump user credentials.