CVE-2005-3968

PHPX 3.5.9 - SQL Injection via Username Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-3968. PoCs published by rgod.

AI-analyzed exploit summary This exploit targets PHPX <=3.5.9, leveraging SQL injection to bypass authentication and execute remote commands. It includes a web interface for inputting target details and executing the attack.

Description

SQL injection vulnerability in auth.inc.php in PHPX 3.5.9 and earlier allows remote attackers to execute arbitrary SQL commands, bypass authentication, and upload arbitrary PHP code via the username parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by rgod · phpwebappsphp

https://www.exploit-db.com/exploits/26697

View Code ZIP pw:eip

This exploit targets PHPX <=3.5.9, leveraging SQL injection to bypass authentication and execute remote commands. It includes a web interface for inputting target details and executing the attack.

Classification

Working Poc 95%

Attack Type

Sqli

Complexity

Moderate

Reliability

Reliable

Target: PHPX <=3.5.9

No auth needed

Prerequisites: Target must be running PHPX <=3.5.9 · Network access to the target

MITRE ATT&CK