CVE-2005-1378
phpbb_personal_notes_module < 1.4.6 - SQL Injection via p Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2005-1378. PoCs published by GulfTech Security.
AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in the notes module of phpBB. It leverages unsanitized input in the 'p' parameter to perform a UNION-based SQL injection, extracting usernames from the database.
Description
SQL injection vulnerability in posting_notes.php in the notes module for phpBB allows remote attackers to execute arbitrary SQL commands via the p parameter, which is used in the $post_id variable, and other attack vectors.
Exploits (1)
This exploit demonstrates an SQL injection vulnerability in the notes module of phpBB. It leverages unsanitized input in the 'p' parameter to perform a UNION-based SQL injection, extracting usernames from the database.