Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-3369. PoCs published by [email protected].
AI-analyzed exploit summary This Perl script exploits a SQL injection vulnerability in Woltlab Burning Board <= 2.3.3 via the info_db.php file. It retrieves the MD5 hash of a specified user by injecting a UNION-based SQL query.
Description
Multiple SQL injection vulnerabilities in the Info-DB module (info_db.php) in Woltlab Burning Board 2.7 and earlier allow remote attackers to execute arbitrary SQL commands and possibly upload files via the (1) fileid and (2) subkatid parameters.
Exploits (1)
This Perl script exploits a SQL injection vulnerability in Woltlab Burning Board <= 2.3.3 via the info_db.php file. It retrieves the MD5 hash of a specified user by injecting a UNION-based SQL query.