CVE-2006-2740
Epicdesigns tinyBB < 0.3 - SQL Injection via Multiple Parameters
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-2740. PoCs published by nukedx.
AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in tinyBB <= 0.3, including remote file inclusion (RFI) via the 'tinybb_footers' parameter, local file inclusion (LFI) via null byte injection, and SQL injection via the 'username' parameter in login.php. The RFI allows remote code execution by including a malicious file, while the LFI can leak sensitive files like /etc/passwd.
Description
Multiple SQL injection vulnerabilities in Epicdesigns tinyBB 0.3 allow remote attackers to execute arbitrary SQL commands via the (1) q parameter in (a) forgot.php, and the (2) username and (3) password parameters in (b) login.php, and other unspecified vectors.
Exploits (1)
The exploit demonstrates multiple vulnerabilities in tinyBB <= 0.3, including remote file inclusion (RFI) via the 'tinybb_footers' parameter, local file inclusion (LFI) via null byte injection, and SQL injection via the 'username' parameter in login.php. The RFI allows remote code execution by including a malicious file, while the LFI can leak sensitive files like /etc/passwd.