CVE-2006-0851

ilchClan 1.05g - SQL Injection via Forum Module pid Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-0851. PoCs published by x128.

AI-analyzed exploit summary This exploit targets a SQL injection vulnerability in IlchClan 1.05g, specifically in the forum module. It extracts user credentials (password and name) via a UNION-based SQLi attack and saves the output to an HTML file.

Description

SQL injection vulnerability in the forum module of ilchClan 1.05g and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter, when creating a newpost.

Exploits (1)

exploitdb WORKING POC VERIFIED

by x128 · phpwebappsphp

https://www.exploit-db.com/exploits/1516

View Code ZIP pw:eip

This exploit targets a SQL injection vulnerability in IlchClan 1.05g, specifically in the forum module. It extracts user credentials (password and name) via a UNION-based SQLi attack and saves the output to an HTML file.

Classification

Working Poc 95%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: IlchClan 1.05g

No auth needed

Prerequisites: Target URL with vulnerable IlchClan installation · Valid post ID where guest replies are allowed · Valid user ID to extract credentials

MITRE ATT&CK

T1189 - Drive-by Compromise T1505 - Server Software Component

devstral-2 · analyzed Feb 16, 2026 Full analysis →