Exploitation Summary
EIP tracks 1 public exploit for CVE-2013-5311. PoCs published by 3spi0n.
AI-analyzed exploit summary This document describes multiple vulnerabilities in PhpVID Script, including SQL injection, XSS, and CRLF injection. It provides example URLs to exploit these vulnerabilities but does not include executable exploit code.
Description
Multiple SQL injection vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to execute arbitrary SQL commands via the "n" parameter to (1) browse_videos.php or (2) members.php. NOTE: the cat parameter is already covered by CVE-2008-4157.
Exploits (1)
This document describes multiple vulnerabilities in PhpVID Script, including SQL injection, XSS, and CRLF injection. It provides example URLs to exploit these vulnerabilities but does not include executable exploit code.