Exploitation Summary
EIP tracks 1 public exploit for CVE-2012-0973. PoCs published by High-Tech Bridge SA.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in OSClass 2.3.3 via the 'sCategory[]' parameter, allowing an attacker to extract database version information. The payload manipulates the SQL query to check if the database version starts with '5'.
Description
Multiple SQL injection vulnerabilities in OSClass before 2.3.5 allow remote attackers to execute arbitrary SQL commands via the sCategory parameter to index.php, which is not properly handled by the (1) osc_search_category_id function in oc-includes/osclass/helpers/hSearch.php and (2) findBySlug function oc-includes/osclass/model/Category.php. NOTE: some of these details are obtained from third party information.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in OSClass 2.3.3 via the 'sCategory[]' parameter, allowing an attacker to extract database version information. The payload manipulates the SQL query to check if the database version starts with '5'.