CVE-2006-4584

This exploit demonstrates SQL injection and authentication bypass in Tr Forum V2.0 by creating a new admin user and extracting admin credentials via a UNION-based SQLi attack.

This exploit demonstrates a CSRF vulnerability in TR Forum 1.5, allowing an attacker to trick an authenticated admin into submitting a form that adds a new admin account. The PoC is a simple HTML form that submits to the vulnerable endpoint.