Exploitation Summary
EIP tracks 1 public exploit for CVE-2015-1476. PoCs published by Manish Tanwar.
AI-analyzed exploit summary This exploit demonstrates SQL injection and authentication bypass vulnerabilities in ecommercemajor CMS. The SQLi occurs in the 'productbycat' parameter of product.php, and the auth bypass is achieved via SQLi in the admin login form.
Description
Multiple SQL injection vulnerabilities in xlinkerz ecommerceMajor allow remote attackers to execute arbitrary SQL commands via the (1) productbycat parameter to product.php, or (2) username or (3) password parameter to __admin/index.php.
Exploits (1)
This exploit demonstrates SQL injection and authentication bypass vulnerabilities in ecommercemajor CMS. The SQLi occurs in the 'productbycat' parameter of product.php, and the auth bypass is achieved via SQLi in the admin login form.