Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-108033. PoCs published by mr_me.
AI-analyzed exploit summary This exploit demonstrates a blind SQL injection vulnerability in jakCMS <= v2.01 RC1 by manipulating the 'JAK_COOKIE_NAME' and 'JAK_COOKIE_PASS' cookie parameters. It extracts database information, administrative credentials, and MySQL user hashes through time-based blind SQLi techniques.
Description
JAKCMS 2.01 RC1 - Blind SQL Injection
Exploits (1)
This exploit demonstrates a blind SQL injection vulnerability in jakCMS <= v2.01 RC1 by manipulating the 'JAK_COOKIE_NAME' and 'JAK_COOKIE_PASS' cookie parameters. It extracts database information, administrative credentials, and MySQL user hashes through time-based blind SQLi techniques.