CVE-2006-1111

Aztek Forum 4.0 - Information Disclosure via msg Parameter SQL Error

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-1111. PoCs published by lorenzo.

AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in AZTEK forums 4.0, including XSS via crafted input in the 'Citer' function, SQL injection via a malformed 'msg' parameter, and a MySQL error-based information leak through unvalidated user registration. The PoC includes specific payloads and steps to trigger these issues.

Description

Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a "*/*" in the msg parameter to index.php, which reveals usernames and passwords in a MySQL error message, possibly due to a forced SQL error or SQL injection.

Exploits (1)

exploitdb WORKING POC VERIFIED

by lorenzo · textwebappsphp

https://www.exploit-db.com/exploits/1547

View Code ZIP pw:eip

The exploit demonstrates multiple vulnerabilities in AZTEK forums 4.0, including XSS via crafted input in the 'Citer' function, SQL injection via a malformed 'msg' parameter, and a MySQL error-based information leak through unvalidated user registration. The PoC includes specific payloads and steps to trigger these issues.

Classification

Working Poc 95%

Attack Type

Xss | Sqli | Info Leak

Complexity

Trivial

Reliability

Reliable

Target: AZTEK forums 4.0

No auth needed

Prerequisites: Access to the forum's web interface · Ability to register a user (for the MySQL error leak)

MITRE ATT&CK