CVE-2002-1457

L-Forum 2.40 - SQL Injection via Search Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2002-1457. PoCs published by Matthew Murphy.

AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in L-Forum's search.php file, with examples for PostgreSQL and MySQL. It lacks executable code but outlines the attack vector.

Description

SQL injection vulnerability in search.php for L-Forum 2.40 allows remote attackers to execute arbitrary SQL statements via the search parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Matthew Murphy · textwebappsphp
https://www.exploit-db.com/exploits/21708

The provided text describes a SQL injection vulnerability in L-Forum's search.php file, with examples for PostgreSQL and MySQL. It lacks executable code but outlines the attack vector.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Theoretical
Target: L-Forum (version unspecified)
No auth needed
Prerequisites: Access to the search.php endpoint
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Patch, Vendor Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/9837.php
Exploit, Patch, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/5468
Exploit, Patch, Vendor Advisory mailing-list x_refsource_vulnwatch
http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0074.html

Scores

EPSS 0.0125
EPSS Percentile 65.4%

Details

Status published
Products (1)
leszek_krupinski/l-forum 2.4.0
Published Jun 09, 2003
Tracked Since Feb 18, 2026