CVE-2008-5851

CVE-2008-5851 describes an SQL injection in the MyPHP Baseball Stats (MyPBS) application. The vulnerability is in index.php via the seasonID parameter, allowing remote attackers to alter the backend database by issuing arbitrary SQL. The NVD data lists a base score of 7.5 (HIGH) with NETWORK atta...

MyPBS SQL Injection Exploit

!/usr/bin/perl Coded by Piker pikerdotther00tatgmaildotcom D.O.M Team piker,ka0x,an0de,xarnuz 2008 Security Researchers MyPBS Remote SQL Injection Exploit This exploit tries to read an arbitrary file. piker@domlabs:/advisories$ perl mypbs.pl http://localhost/mypbs /etc/passwd + File HEX:...

MyPBS (index.php seasonID) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================= MyPBS index.php seasonID Remote SQL Injection Exploit ======================================================= !/usr/bin/perl Coded by Piker D.O.M Team piker,ka0x,an0de,xarnuz 2008...

MyPBS - 'seasonID' SQL Injection

!/usr/bin/perl Coded by Piker pikerdotther00tatgmaildotcom D.O.M Team piker,ka0x,an0de,xarnuz 2008 Security Researchers MyPBS Remote SQL Injection Exploit This exploit tries to read an arbitrary file. piker@domlabs:/advisories$ perl mypbs.pl http://localhost/mypbs /etc/passwd + File HEX:...