Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-4702. PoCs published by almaster.
AI-analyzed exploit summary The provided text describes a remote SQL injection vulnerability in ipbProArcade, specifically targeting the 'gameid' parameter. It outlines how an attacker can manipulate SQL queries to disclose or corrupt sensitive database information.
Description
SQL injection vulnerability in the favorites module in index.php in IPBProArcade 2.5.2 allows remote attackers to inject arbitrary SQL commands via the gameid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. In addition, the demonstration code as used by third parties suggests that this might be a different type of vulnerability related to shell metacharacters. Finally, this could be a rediscovery of CVE-2004-1430.
Exploits (1)
The provided text describes a remote SQL injection vulnerability in ipbProArcade, specifically targeting the 'gameid' parameter. It outlines how an attacker can manipulate SQL queries to disclose or corrupt sensitive database information.