CVE-2006-0444
phpclanwebsite 1.23.1 - SQL Injection via Forum Post Par Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-0444. PoCs published by matrix_killer.
AI-analyzed exploit summary This Perl script exploits a SQL injection vulnerability in Phpclanwebsite 1.23.1 by injecting a UNION-based query to extract password hashes from the database. It first retrieves a session cookie and then uses it to perform the injection.
Description
SQL injection vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.1 allows remote attackers to execute arbitrary SQL commands via the (1) par parameter in the post function on the forum page and possibly the (2) poll_id parameter on the poll page. NOTE: the poll_id vector can also allow resultant cross-site scripting (XSS) from an unquoted error message for invalid SQL syntax.
Exploits (1)
This Perl script exploits a SQL injection vulnerability in Phpclanwebsite 1.23.1 by injecting a UNION-based query to extract password hashes from the database. It first retrieves a session cookie and then uses it to perform the injection.