CVE-2006-4673
php_fusion < 6.01.4 - SQL Injection via _SERVER[REMOTE_ADDR] Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-4673. PoCs published by rgod.
AI-analyzed exploit summary This exploit leverages an SQL injection vulnerability in PHP-Fusion <= 6.01.4 by manipulating the _SERVER[REMOTE_ADDR] variable via the extract() function. It performs a blind SQL injection to extract the admin password and ID by using time-based techniques.
Description
Global variable overwrite vulnerability in maincore.php in PHP-Fusion 6.01.4 and earlier uses the extract function on the superglobals, which allows remote attackers to conduct SQL injection attacks via the _SERVER[REMOTE_ADDR] parameter to news.php.
Exploits (1)
This exploit leverages an SQL injection vulnerability in PHP-Fusion <= 6.01.4 by manipulating the _SERVER[REMOTE_ADDR] variable via the extract() function. It performs a blind SQL injection to extract the admin password and ID by using time-based techniques.