CVE-2005-3682

This exploit targets a SQL injection vulnerability in Wizz Forum, allowing an attacker to retrieve user credentials (username and MD5 password hash) by manipulating the TopicID parameter. It uses a UNION-based SQL injection to extract data from the ForumUser table.

The exploit demonstrates SQL injection in Wizz Forum via the TopicID parameter in ForumReply.php, allowing an attacker to extract user credentials (userid and password) from the ForumUser table.

This exploit demonstrates a SQL injection vulnerability in Wizz Forum by manipulating the 'AuthID' parameter in 'ForumAuthDetails.php'. The payload uses a UNION-based SQLi to extract sensitive data such as passwords and user IDs.