CVE-2005-1598
Invision Power Board <= 2.0.3 - SQL Injection via Cookie Password Hash
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2005-1598. PoCs published by Danica Jones, Petey Beege.
AI-analyzed exploit summary This is a tutorial explaining how to use an exploit for CVE-2005-1598, which involves retrieving password hashes from Invision Power Board (IPB) forums and manipulating browser cookies to bypass authentication.
Description
SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted cookie password hash (pass_hash) that modifies the internal $pid variable.
Exploits (3)
This is a tutorial explaining how to use an exploit for CVE-2005-1598, which involves retrieving password hashes from Invision Power Board (IPB) forums and manipulating browser cookies to bypass authentication.
This Perl script exploits a SQL injection vulnerability in Invision Power Board to bypass authentication by brute-forcing the password hash. It iterates through possible characters to reconstruct the password or login key for a specified user ID.
This is a detailed technical analysis of CVE-2005-1598, covering SQL injection and XSS vulnerabilities in IP.Board. It includes code snippets, root cause analysis, and exploitation techniques, but does not provide functional exploit code.