CVE-2005-4218

phpwebthings 1.4 - SQL Injection via Forum Message Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2005-4218. PoCs published by rgod, AhLam.

AI-analyzed exploit summary This PHP script exploits SQL injection vulnerabilities in PHPWebThings 1.4 via the 'msg' and 'forum' parameters, allowing administrative credential disclosure and remote command execution. It includes functionality to bypass magic_quotes_gpc and supports proxy usage.

Description

SQL injection vulnerability in forum.php in PHPWebThings 1.4 allows remote attackers to execute arbitrary SQL commands via the msg parameter, a different vulnerability than CVE-2005-3585.

Exploits (2)

exploitdb WORKING POC VERIFIED
by rgod · phpwebappsphp
https://www.exploit-db.com/exploits/1324

This PHP script exploits SQL injection vulnerabilities in PHPWebThings 1.4 via the 'msg' and 'forum' parameters, allowing administrative credential disclosure and remote command execution. It includes functionality to bypass magic_quotes_gpc and supports proxy usage.

Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Moderate
Reliability
Reliable
Target: PHPWebThings 1.4
No auth needed
Prerequisites: Target running PHPWebThings 1.4 · Network access to the target
devstral-2 · analyzed Feb 18, 2026 Full analysis →
exploitdb WORKING POC VERIFIED
by AhLam · perlwebappsphp
https://www.exploit-db.com/exploits/1325

This exploit demonstrates a SQL injection vulnerability in phpwebthing v1.4.4, allowing an attacker to retrieve the MD5 hash of a user's password by manipulating the 'forum' parameter in the URL. The script uses LWP::Simple to send a crafted request and extract the hash from the response.

Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: phpwebthing v1.4.4
No auth needed
Prerequisites: Target URL · User ID
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/1324
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/15465

Scores

EPSS 0.0243
EPSS Percentile 82.0%

Details

Status published
Products (1)
phpwebthings/phpwebthings 1.4
Published Dec 14, 2005
Tracked Since Feb 18, 2026