CVE-2012-2236
PHP Gift Registry 1.5.5 - Authenticated SQL Injection via UserID Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2012-2236. PoCs published by G13.
AI-analyzed exploit summary This is a writeup describing a SQL injection vulnerability in PHP Gift Registry 1.5.5, specifically in the 'userid' parameter of the 'users.php' file. The exploit requires user authentication and provides a basic example of the vulnerable URL.
Description
SQL injection vulnerability in users.php in PHP Gift Registry 1.5.5 allows remote authenticated users to execute arbitrary SQL commands via the userid parameter in an edit action.
Exploits (1)
This is a writeup describing a SQL injection vulnerability in PHP Gift Registry 1.5.5, specifically in the 'userid' parameter of the 'users.php' file. The exploit requires user authentication and provides a basic example of the vulnerable URL.