Exploitation Summary
EIP tracks 1 public exploit for CVE-2013-5697. PoCs published by Wireghoul.
AI-analyzed exploit summary This PoC demonstrates a blind SQL injection in mod_accounting 0.5 via the Host header, leading to remote command execution by exploiting PostgreSQL's ability to load and execute arbitrary functions. The exploit attempts multiple injection vectors to terminate the SQL query and execute a netcat reverse shell.
Description
SQL injection vulnerability in mod_accounting.c in the mod_accounting module 0.5 and earlier for Apache allows remote attackers to execute arbitrary SQL commands via a Host header.
Exploits (1)
This PoC demonstrates a blind SQL injection in mod_accounting 0.5 via the Host header, leading to remote command execution by exploiting PostgreSQL's ability to load and execute arbitrary functions. The exploit attempts multiple injection vectors to terminate the SQL query and execute a netcat reverse shell.