CVE-2006-1495
PHPCollab 2.4-2.5.rc3, NetOffice 2.5.3-pl1-2.6.0b2 - SQL Injection
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-1495. PoCs published by rgod.
AI-analyzed exploit summary This exploit targets a SQL injection vulnerability in PHPCollab and NetOffice's sendpassword.php script, allowing an attacker to retrieve admin passwords via a crafted UNION-based SQL query when magic_quotes_gpc is disabled. It sends a malicious POST request to extract password hashes via email.
Description
SQL injection vulnerability in general/sendpassword.php in (1) PHPCollab 2.4 and 2.5.rc3, and (2) NetOffice 2.5.3-pl1 and 2.6.0b2 allows remote attackers to execute arbitrary SQL commands via the loginForm parameter in the "forgotten password" option.
Exploits (1)
This exploit targets a SQL injection vulnerability in PHPCollab and NetOffice's sendpassword.php script, allowing an attacker to retrieve admin passwords via a crafted UNION-based SQL query when magic_quotes_gpc is disabled. It sends a malicious POST request to extract password hashes via email.