Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-4619.
AI-analyzed exploit summary This Perl script exploits a SQL injection vulnerability in Zorum forum version 3.5 by brute-forcing user passwords via a time-based blind SQLi attack. It targets the 'showhtmllist' method to extract password hashes character by character.
Description
SQL injection vulnerability in index.php in phpoutsourcing Zorum Forum 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the rollid parameter in the showhtmllist method.
Exploits (1)
This Perl script exploits a SQL injection vulnerability in Zorum forum version 3.5 by brute-forcing user passwords via a time-based blind SQLi attack. It targets the 'showhtmllist' method to extract password hashes character by character.