Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-105621. PoCs published by Easy Laster.
AI-analyzed exploit summary This Ruby script exploits a SQL injection vulnerability in BS Auction software by injecting malicious SQL queries into the 'id' parameter of 'articlesdetails.php'. It extracts user credentials (ID, username, password, email) from the 'PHPAUCTION_users' table using UNION-based SQLi with error-based concatenation.
Description
BS Auction - SQL Injection
Exploits (1)
This Ruby script exploits a SQL injection vulnerability in BS Auction software by injecting malicious SQL queries into the 'id' parameter of 'articlesdetails.php'. It extracts user credentials (ID, username, password, email) from the 'PHPAUCTION_users' table using UNION-based SQLi with error-based concatenation.