Exploitation Summary
EIP tracks 3 public exploits for CVE-2012-5292. PoCs published by BHG Security Center.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Atar2b CMS by manipulating the 'id' parameter in a URL to inject SQL commands. The 'order by' technique is used to confirm the vulnerability and potentially extract data.
Description
Multiple SQL injection vulnerabilities in Atar2b CMS 4.0.1 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) gallery_e.php, (2) pageE.php, or (3) pageH.php.
Exploits (3)
This exploit demonstrates a SQL injection vulnerability in Atar2b CMS by manipulating the 'id' parameter in a URL to inject SQL commands. The 'order by' technique is used to confirm the vulnerability and potentially extract data.
The provided text describes a SQL injection vulnerability in Atar2b CMS 4.0.1, where user-supplied input is not properly sanitized before being used in SQL queries. The example URL demonstrates a basic SQLi payload but lacks executable exploit code.
This exploit demonstrates SQL injection in Atar2b CMS by manipulating the 'id' parameter in the gallery_e.php endpoint. The payload uses 'order by' to confirm vulnerability, allowing potential data access or manipulation.