Exploitation Summary
EIP tracks 1 public exploit for CVE-2003-1244. PoCs published by David Zentner.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in phpBB2 (versions 2.0, 2.01, 2.02) by brute-forcing a user's password hash character-by-character. It sends crafted POST requests to the target server and checks responses to determine the correct characters.
Description
SQL injection vulnerability in page_header.php in phpBB 2.0, 2.0.1 and 2.0.2 allows remote attackers to brute force user passwords and possibly gain unauthorized access to forums via the forum_id parameter to index.php.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in phpBB2 (versions 2.0, 2.01, 2.02) by brute-forcing a user's password hash character-by-character. It sends crafted POST requests to the target server and checks responses to determine the correct characters.