Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-114604. PoCs published by HosseinNsn.
AI-analyzed exploit summary The exploit demonstrates a blind SQL injection vulnerability in Zenphoto 1.4.4.1 by manipulating the 'rss' parameter in the URL. The payload 'undefined+and+1%3D0' is used to trigger the vulnerability, allowing an attacker to potentially compromise the application or access/modify data.
Description
ZenPhoto - 'index.php' SQL Injection
Exploits (1)
The exploit demonstrates a blind SQL injection vulnerability in Zenphoto 1.4.4.1 by manipulating the 'rss' parameter in the URL. The payload 'undefined+and+1%3D0' is used to trigger the vulnerability, allowing an attacker to potentially compromise the application or access/modify data.