CVE-2006-2867
CoolForum < 0.8.3_beta - SQL Injection via editpost.php Post Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-2867. PoCs published by DarkFig.
AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in CoolForum, allowing an attacker to extract user credentials by leveraging a UNION-based SQLi attack. The payload writes the userid, login, and password fields from the cf_user table to a file on the server.
Description
SQL injection vulnerability in editpost.php in CoolForum 0.8.3 beta and earlier allows remote attackers to execute arbitrary SQL commands via the post parameter.
Exploits (1)
This exploit demonstrates an SQL injection vulnerability in CoolForum, allowing an attacker to extract user credentials by leveraging a UNION-based SQLi attack. The payload writes the userid, login, and password fields from the cf_user table to a file on the server.