CVE-2006-0160

Venom Board 1.22 - SQL Injection via parent root or topic_id Parameters

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-0160. PoCs published by Aliaksandr Hartsuyeu.

AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Venom Board by injecting a UNION SELECT statement into the topic_id parameter. It can be used to extract data from the database.

Description

SQL injection vulnerability in add_post.php3 in Venom Board 1.22 allows remote attackers to execute arbitrary SQL commands via the (1) parent, (2) root, and (3) topic_id parameters to post.php3.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Aliaksandr Hartsuyeu · textwebappsphp

https://www.exploit-db.com/exploits/27053

View Code ZIP pw:eip

This exploit demonstrates a SQL injection vulnerability in Venom Board by injecting a UNION SELECT statement into the topic_id parameter. It can be used to extract data from the database.

Classification

Working Poc 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: Venom Board (version not specified)

No auth needed

Prerequisites: Access to the vulnerable Venom Board instance

MITRE ATT&CK