Exploitation Summary
EIP tracks 2 public exploits for CVE-2005-1026. PoCs published by LovER BOY.
AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in the Linkz Pro mod for phpBB, where unsanitized user input in the 'id' parameter can be exploited to manipulate SQL queries. The example URL demonstrates the injection point but does not include executable exploit code.
Description
Multiple SQL injection vulnerabilities in SnailSource phpBB 2.0.x mods allow remote attackers to execute arbitrary SQL commands via the (1) file_id parameter to dlman.php in DLMan Pro or (2) id parameter to links.php in Linkz Pro (aka LinksLinks Pro).
Exploits (2)
The provided text describes a SQL injection vulnerability in the Linkz Pro mod for phpBB, where unsanitized user input in the 'id' parameter can be exploited to manipulate SQL queries. The example URL demonstrates the injection point but does not include executable exploit code.
The provided text describes an SQL injection vulnerability in DLMan Pro mod for phpBB, where the 'file_id' parameter in 'dlman.php' is not properly sanitized. Exploitation could lead to data compromise or further attacks on the underlying database.