CVE-2005-0413
MyPHP Forum 1.0 - SQL Injection via forum.php fid Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2005-0413. PoCs published by x0kster, GHC.
AI-analyzed exploit summary The exploit demonstrates SQL injection vulnerabilities in MyPHP Forum <= 3.0 (Final) via the 'id' parameter in faq.php and the 'member' parameter in member.php. It includes functional PoC URLs that extract user credentials from the database when magic_quotes_gpc is disabled.
Description
Multiple SQL injection vulnerabilities in MyPHP Forum 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the fid in forum.php, (2) the member parameter in member.php, (3) the email parameter in forgot.php, or (4) the nbuser or nbpass parameters in include.php. NOTE: it was later reported that vector 2 exists in 3.0 and earlier.
Exploits (2)
The exploit demonstrates SQL injection vulnerabilities in MyPHP Forum <= 3.0 (Final) via the 'id' parameter in faq.php and the 'member' parameter in member.php. It includes functional PoC URLs that extract user credentials from the database when magic_quotes_gpc is disabled.
This exploit demonstrates a SQL injection vulnerability in MyPHP Forum 1.0, allowing an attacker to extract administrator credentials by manipulating the 'member' parameter in a UNION-based attack.