CVE-2006-1001
LanSuite LanParty Intranet System 2.0.6 and 2.1.0 beta - SQL Injection via Board Module fid Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-1001. PoCs published by x128.
AI-analyzed exploit summary This exploit targets a SQL injection vulnerability in LanSuite 2.10, allowing an attacker to extract user passwords by manipulating the 'fid' parameter in a crafted HTTP request. The script uses cURL to perform the injection and retrieve the password from the database.
Description
SQL injection vulnerability in the board module in LanSuite LanParty Intranet System 2.0.6 and 2.1.0 beta allows remote attackers to execute arbitrary SQL commands via the fid parameter.
Exploits (1)
This exploit targets a SQL injection vulnerability in LanSuite 2.10, allowing an attacker to extract user passwords by manipulating the 'fid' parameter in a crafted HTTP request. The script uses cURL to perform the injection and retrieve the password from the database.