Exploitation Summary
EIP tracks 2 public exploits for CVE-2005-3575. PoCs published by HACKERS PAL, rgod.
AI-analyzed exploit summary This exploit leverages a SQL injection vulnerability in Cyphor Forum to dump user credentials (username and password hash) by manipulating the 'id' parameter in the 'show.php' script. It uses a UNION-based SQLi to extract data from the 'users' table.
Description
SQL injection vulnerability in show.php in Cyphor 0.19 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Exploits (2)
This exploit leverages a SQL injection vulnerability in Cyphor Forum to dump user credentials (username and password hash) by manipulating the 'id' parameter in the 'show.php' script. It uses a UNION-based SQLi to extract data from the 'users' table.
This exploit targets a SQL injection vulnerability in Cyphor 0.19, allowing an attacker to retrieve the table prefix and send a new password to an arbitrary email address. The exploit constructs malicious SQL queries to manipulate the password reset functionality.