Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-9464. PoCs published by Pham Kien Cuong.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Microweber CMS 0.95 via the 'category' parameter in the shop module. The PoC provides a clear example of how an attacker can inject malicious SQL queries through the URL path.
Description
SQL injection vulnerability in Category.php in Microweber CMS 0.95 before 20141209 allows remote attackers to execute arbitrary SQL commands via the category parameter when displaying a category, related to the $parent_id variable.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in Microweber CMS 0.95 via the 'category' parameter in the shop module. The PoC provides a clear example of how an attacker can inject malicious SQL queries through the URL path.