CVE-2004-2350
phpBB 1.0-2.0.6 - SQL Injection via search_results Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2004-2350. PoCs published by pokleyzz.
AI-analyzed exploit summary This exploit targets a SQL injection vulnerability in phpBB 2.0.6's search.php script, allowing an attacker to extract user password hashes by manipulating SQL queries through unsanitized input. It uses cURL to automate the attack and brute-force character extraction.
Description
SQL injection vulnerability in search.php for phpBB 1.0 through 2.0.6 allows remote attackers to execute arbitrary SQL and gain privileges via the search_results parameter.
Exploits (1)
This exploit targets a SQL injection vulnerability in phpBB 2.0.6's search.php script, allowing an attacker to extract user password hashes by manipulating SQL queries through unsanitized input. It uses cURL to automate the attack and brute-force character extraction.