SQL Injection in pSys Chatbox Allows Remote Code Execution
CVE-2008-3131
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2008-3131?
An SQL injection vulnerability exists in the chatbox.php script of pSys 0.7.0 Alpha, permitting remote attackers to execute arbitrary SQL commands. This flaw occurs when the magic_quotes_gpc feature is disabled, allowing for manipulation of the showid parameter. Exploiting this vulnerability can lead to unauthorized data access and potential system compromise.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.