The exploit demonstrates an SQL injection vulnerability in Flo CMS by injecting a single quote into the 'archivem' parameter, which can compromise the application or underlying database. The PoC is a simple URL-based injection, typical of SQLi vulnerabilities.
Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:Flo CMS (version unspecified)
No auth needed
Prerequisites:Access to the vulnerable Flo CMS instance