EIP-2026-107369
PRE-CVEGeeklog 1.5.2 - 'usersettings.php' SQL Injection
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-107369. PoCs published by Nine:Situations:Group::bookoo.
AI-analyzed exploit summary This exploit targets an SQL injection vulnerability in Geeklog 1.5.2 and earlier, allowing an attacker to extract the admin password hash by manipulating the 'blocks' parameter in usersettings.php. The PoC automates the extraction of the MD5 hash through a blind SQLi technique.
Description
Geeklog 1.5.2 - 'usersettings.php' SQL Injection
Exploits (1)
This exploit targets an SQL injection vulnerability in Geeklog 1.5.2 and earlier, allowing an attacker to extract the admin password hash by manipulating the 'blocks' parameter in usersettings.php. The PoC automates the extraction of the MD5 hash through a blind SQLi technique.