Exploitation Summary
EIP tracks 2 public exploits for CVE-2014-9237. PoCs published by BGA Security, Onur Alanbel (BGA).
AI-analyzed exploit summary The exploit demonstrates an SQL injection vulnerability in Proticaret E-Commerce Script v3.0 via a SOAP request. The PoC injects a malicious SQL query into the 'Code' parameter to extract password information from the database.
Description
SQL injection vulnerability in Proticaret E-Commerce 3.0 allows remote attackers to execute arbitrary SQL commands via a tem:Code element in a SOAP request.
Exploits (2)
The exploit demonstrates an SQL injection vulnerability in Proticaret E-Commerce Script v3.0 via a SOAP request. The PoC injects a malicious SQL query into the 'Code' parameter to extract password information from the database.
The exploit demonstrates an SQL injection vulnerability in Proticaret E-Commerce Script v3.0 via a SOAP request. The PoC extracts user passwords by manipulating the 'Code' parameter in the 'GetProductCodes' SOAP method.