CVE-2011-1100
Pixelpost 1.7.3 - Authenticated SQL Injection via findfid, id, selectfcat, selectfmon, or selectftag Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2011-1100. PoCs published by LiquidWorm.
AI-analyzed exploit summary This is a writeup describing an SQL injection vulnerability in Pixelpost 1.7.3, where multiple POST variables (findfid, id, selectfcat, selectfmon, selectftag) are not properly sanitized, allowing an attacker to compromise the database. The example provided demonstrates the vulnerability but does not include executable exploit code.
Description
Multiple SQL injection vulnerabilities in admin/index.php in Pixelpost 1.7.3 allow remote authenticated users to execute arbitrary SQL commands via the (1) findfid, (2) id, (3) selectfcat, (4) selectfmon, or (5) selectftag parameter in an images action.
Exploits (1)
This is a writeup describing an SQL injection vulnerability in Pixelpost 1.7.3, where multiple POST variables (findfid, id, selectfcat, selectfmon, selectftag) are not properly sanitized, allowing an attacker to compromise the database. The example provided demonstrates the vulnerability but does not include executable exploit code.