CVE-2006-5828

DeltaScripts PHP Classifieds <= 7.1 - SQL Injection via detail.php user_id Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-5828. PoCs published by ajann.

AI-analyzed exploit summary This Perl script exploits a SQL injection vulnerability in Php Classifieds <= 7.1 via the 'detail.php' file. It crafts a malicious SQL query to extract admin credentials (username and password) from the database.

Description

SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.1 and earlier allows remote attackers to execute arbitrary SQL commands via the user_id parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by ajann · perlwebappsphp
https://www.exploit-db.com/exploits/2720

This Perl script exploits a SQL injection vulnerability in Php Classifieds <= 7.1 via the 'detail.php' file. It crafts a malicious SQL query to extract admin credentials (username and password) from the database.

Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: Php Classifieds <= 7.1
No auth needed
Prerequisites: Target must be running Php Classifieds <= 7.1 · Target must have 'detail.php' accessible · Attacker must know the target's URL and path
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/30023
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/20935
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/2720
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/4403
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22704

Scores

EPSS 0.0108
EPSS Percentile 60.7%

Details

Status published
Products (4)
deltascripts/php_classifieds 6.0.5
deltascripts/php_classifieds 6.18
deltascripts/php_classifieds 6.20
deltascripts/php_classifieds 7.1
Published Nov 10, 2006
Tracked Since Feb 18, 2026