CVE-2006-0520

Dragoran Portal module 1.3 - SQL Injection via Site Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-0520. PoCs published by SkOd.

AI-analyzed exploit summary This exploit targets a SQL injection vulnerability in IPB Portal 1.3, allowing an attacker to extract MD5 password hashes from the database by manipulating the 'site' parameter in a UNION-based SQL injection attack.

Description

SQL injection vulnerability index.php in Dragoran Portal module 1.3 for Invision Power Board (IPB) allows remote attackers to execute arbitrary SQL commands via the site parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Exploits (1)

exploitdb WORKING POC VERIFIED

by SkOd · perlwebappsphp

https://www.exploit-db.com/exploits/1461

View Code ZIP pw:eip

This exploit targets a SQL injection vulnerability in IPB Portal 1.3, allowing an attacker to extract MD5 password hashes from the database by manipulating the 'site' parameter in a UNION-based SQL injection attack.

Classification

Working Poc 95%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: IPB Portal 1.3 (Invision Power Board plugin)

No auth needed

Prerequisites: Target must be running IPB Portal 1.3 · Network access to the target web server

MITRE ATT&CK