The exploit demonstrates a SQL injection vulnerability in Ypninc Realty Classifieds via the 'id' parameter in gmap.php. The PoC includes a UNION-based SQLi payload to extract database version information.
Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:Ypninc Realty Classifieds
No auth needed
Prerequisites:Access to the vulnerable gmap.php endpoint