CVE-2003-1435
PHP-Nuke 5.6 and 6.0 - SQL Injection via Search Module Days Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2003-1435. PoCs published by David Zentner.
AI-analyzed exploit summary This exploit targets an SQL injection vulnerability in PHPNuke's search module, allowing an attacker to brute-force extract the admin password hash by manipulating SQL queries. It iterates through possible characters to reconstruct the password hash one character at a time.
Description
SQL injection vulnerability in PHP-Nuke 5.6 and 6.0 allows remote attackers to execute arbitrary SQL commands via the days parameter to the search module.
Exploits (1)
This exploit targets an SQL injection vulnerability in PHPNuke's search module, allowing an attacker to brute-force extract the admin password hash by manipulating SQL queries. It iterates through possible characters to reconstruct the password hash one character at a time.