CVE-2005-3686

Unclassified NewsBoard < 1.5.3_patch3 - SQL Injection via DateFrom or DateUntil Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-3686. PoCs published by rgod.

AI-analyzed exploit summary This PHP script exploits a blind SQL injection vulnerability in Unclassified NewsBoard 1.5.3 patch level 3 via the 'Datefrom' parameter. It allows an attacker to dump the admin MD5 password hash by leveraging time-based blind SQL injection techniques.

Description

SQL injection vulnerability in search.inc.php in Unclassified NewsBoard before 1.5.3 Patch 4 allows remote attackers to execute arbitrary SQL commands via the (1) DateFrom or (2) DateUntil parameter to forum.php.

Exploits (1)

exploitdb WORKING POC VERIFIED

by rgod · phpwebappsphp

https://www.exploit-db.com/exploits/1319

View Code ZIP pw:eip

This PHP script exploits a blind SQL injection vulnerability in Unclassified NewsBoard 1.5.3 patch level 3 via the 'Datefrom' parameter. It allows an attacker to dump the admin MD5 password hash by leveraging time-based blind SQL injection techniques.

Classification

Working Poc 95%

Attack Type

Sqli

Complexity

Moderate

Reliability

Reliable

Target: Unclassified NewsBoard 1.5.3 patch level 3

No auth needed

Prerequisites: Target must be running Unclassified NewsBoard 1.5.3pl3 · PHP environment with socket support or fsockopen enabled

MITRE ATT&CK