CVE-2005-4071
CFMagic Magic Forum Personal < 2.5 - SQL Injection via ForumID or ThreadID Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2005-4071. PoCs published by r0t.
AI-analyzed exploit summary The provided text describes SQL injection and XSS vulnerabilities in CFMagic Products due to insufficient input sanitization. It includes example URLs demonstrating potential SQL injection points but lacks executable exploit code.
Description
Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ForumID parameter in view_forum.cfm, and (2) ForumID, (3) Thread, and (4) ThreadID parameters in view_thread.cfm.
Exploits (2)
The provided text describes SQL injection and XSS vulnerabilities in CFMagic Products due to insufficient input sanitization. It includes example URLs demonstrating potential SQL injection points but lacks executable exploit code.
The provided text describes SQL injection and XSS vulnerabilities in CFMagic Products due to insufficient input sanitization. It includes a sample URL demonstrating SQL injection but lacks executable exploit code.