CVE-2006-0074
PHPenpals < 1.1 - SQL Injection via profile.php personalID Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-0074. PoCs published by Br0ly, Aliaksandr Hartsuyeu.
AI-analyzed exploit summary This Perl script exploits a SQL injection vulnerability in Phpenpals <= 1.1, allowing an attacker to retrieve the admin password or read arbitrary files from the server. It uses union-based SQL injection to extract data via the 'mail.php' endpoint.
Description
SQL injection vulnerability in profile.php in PHPenpals allows remote attackers to execute arbitrary SQL commands via the personalID parameter. NOTE: it was later reported that 1.1 and earlier are affected.
Exploits (2)
This Perl script exploits a SQL injection vulnerability in Phpenpals <= 1.1, allowing an attacker to retrieve the admin password or read arbitrary files from the server. It uses union-based SQL injection to extract data via the 'mail.php' endpoint.
This exploit demonstrates an SQL injection vulnerability in Jevontech PHPenpals by injecting a UNION-based query to retrieve the admin password from the database. The attack leverages unsanitized input in the 'personalID' parameter.