CVE-2005-3236
Cyphor 0.19 - SQL Injection and Cross-Site Scripting via fid Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2005-3236. PoCs published by [email protected], rgod.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Cyphor, allowing unauthorized access to user credentials via a crafted UNION SELECT query. The attack targets the 'fid' parameter in newmsg.php to extract nicknames and passwords from the users table.
Description
Multiple SQL injection vulnerabilities in Cyphor 0.19 allow remote attackers to execute arbitrary SQL and obtain administrative access via (1) the fid parameter of newmsg.php, which can enable XSS attacks when the SQL syntax is invalid or (2) the nick parameter of lostpwd.php.
Exploits (2)
This exploit demonstrates a SQL injection vulnerability in Cyphor, allowing unauthorized access to user credentials via a crafted UNION SELECT query. The attack targets the 'fid' parameter in newmsg.php to extract nicknames and passwords from the users table.
This exploit targets CVE-2005-3236, a SQL injection vulnerability in Cyphor 0.19. It automates the retrieval of the database table prefix and sends a new password to an attacker-specified email address by exploiting the vulnerability in the 'show.php' file.