CVE-2005-3918
OvBB 0.08a - SQL Injection via Thread ID or User ID Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2005-3918. PoCs published by r0t3d3Vil.
AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in OvBB 0.08a and prior versions, where the 'threadid' parameter in 'thread.php' is vulnerable. No actual exploit code is included, only a description and an example URL.
Description
Multiple SQL injection vulnerabilities in OvBB 0.08a allow remote attackers to execute arbitrary SQL commands via the (1) threadid parameter to thread.php and (2) userid parameter to profile.php. NOTE: the vendor disputes these issues, saying "these reports are completely unsubstantial.
Exploits (2)
The provided text describes a SQL injection vulnerability in OvBB 0.08a and prior versions, where the 'threadid' parameter in 'thread.php' is vulnerable. No actual exploit code is included, only a description and an example URL.
This is a vulnerability writeup describing SQL injection in OvBB 0.08a and prior versions. It provides a basic example URL but lacks executable exploit code.