CVE-2006-2255
Creative Community Portal <= 1.1 - SQL Injection via Multiple Parameters
Title source: llmExploitation Summary
EIP tracks 6 public exploits for CVE-2006-2255. PoCs published by r0t.
AI-analyzed exploit summary The provided text describes SQL injection vulnerabilities in Creative Community Portal version 1.1, specifically in the PollResults.php file via the 'answer_id' and 'AddVote' parameters. It outlines the vulnerability but does not include executable exploit code.
Description
Multiple SQL injection vulnerabilities in Creative Community Portal 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) article_id parameter to (a) ArticleView.php, (2) forum_id parameter to (b) DiscView.php or (c) Discussions.php, (3) event_id parameter to (d) EventView.php, (4) AddVote and (5) answer_id parameter to (e) PollResults.php, or (7) mid parameter to (f) DiscReply.php.
Exploits (6)
The provided text describes SQL injection vulnerabilities in Creative Community Portal version 1.1, specifically in the PollResults.php file via the 'answer_id' and 'AddVote' parameters. It outlines the vulnerability but does not include executable exploit code.
The provided text describes SQL injection vulnerabilities in Creative Community Portal version 1.1, with an example URL demonstrating the injection point. No actual exploit code is included.
The provided text describes a SQL injection vulnerability in Creative Community Portal version 1.1, where the 'forum_id' parameter in DiscView.php is not properly sanitized. It includes a sample exploit URL but lacks actual exploit code.
The provided text describes a SQL injection vulnerability in Creative Community Portal version 1.1, where the 'forum_id' parameter in Discussions.php is not properly sanitized. This allows attackers to manipulate SQL queries, potentially compromising the application or underlying database.
The provided text describes SQL injection vulnerabilities in Creative Community Portal version 1.1, specifically in the DiscReply.php file via the 'mid' parameter. It lacks executable exploit code but details the vulnerability and potential impact.
The provided text describes SQL injection vulnerabilities in Creative Community Portal version 1.1, but does not include actual exploit code. It references a generic SQLi vector without implementation details.