Exploitation Summary
EIP tracks 2 public exploits for CVE-2013-7192. PoCs published by R3d-D3V!L.
AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in EtoShop Dynamic Biz Website Builder (QuickWeb) 1.0.0, where the 'id' parameter in 'newdetail.asp' is not properly sanitized. It includes an example URL demonstrating the vulnerability but lacks executable exploit code.
Description
Multiple SQL injection vulnerabilities in Dynamic Biz Website Builder (QuickWeb) allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to apps/news-events/newdetail.asp, or the (2) UserID or (3) Password to login.asp.
Exploits (2)
The provided text describes a SQL injection vulnerability in EtoShop Dynamic Biz Website Builder (QuickWeb) 1.0.0, where the 'id' parameter in 'newdetail.asp' is not properly sanitized. It includes an example URL demonstrating the vulnerability but lacks executable exploit code.
The provided text describes a SQL injection vulnerability in EtoShop Dynamic Biz Website Builder (QuickWeb) 1.0.0, detailing how an attacker can bypass authentication by injecting SQL queries into the UserID and Password fields.