Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-0123. PoCs published by StAkeR.
AI-analyzed exploit summary This exploit targets a blind SQL injection vulnerability in ADN Forum <= 1.0b. It brute-forces the admin password by checking character-by-character via ASCII values and leverages the application's response to determine correctness.
Description
Multiple SQL injection vulnerabilities in ADN Forum 1.0b allow remote attackers to execute arbitrary SQL commands via the (1) fid parameter in index.php and (2) pagid parameter in verpag.php, and possibly other vectors.
Exploits (1)
This exploit targets a blind SQL injection vulnerability in ADN Forum <= 1.0b. It brute-forces the admin password by checking character-by-character via ASCII values and leverages the application's response to determine correctness.