CVE-2006-0870

Mini-Nuke CMS < 1.8.2 - SQL Injection via pages.asp id Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-0870. PoCs published by nukedx.

AI-analyzed exploit summary This exploit targets a SQL injection vulnerability in MiniNuke CMS via the 'pages.asp' page. It extracts user credentials (MD5 hashes) by injecting a UNION-based SQL query.

Description

SQL injection vulnerability in pages.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: version 2.3 was later reported to be vulnerable as well.

Exploits (1)

exploitdb WORKING POC VERIFIED

by nukedx · perlwebappsasp

https://www.exploit-db.com/exploits/1514

View Code ZIP pw:eip

This exploit targets a SQL injection vulnerability in MiniNuke CMS via the 'pages.asp' page. It extracts user credentials (MD5 hashes) by injecting a UNION-based SQL query.

Classification

Working Poc 95%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: MiniNuke CMS (all versions)

No auth needed

Prerequisites: Target must be running MiniNuke CMS with vulnerable 'pages.asp' endpoint

MITRE ATT&CK