Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-6280. PoCs published by DarkFig.
AI-analyzed exploit summary This exploit is a PHP script that performs a blind SQL injection attack against Oxygen <= 1.1.3 (O2PHP Bulletin Board) to extract user password hashes. It brute-forces each character of the password by checking HTTP responses for a specific pattern.
Description
SQL injection vulnerability in viewthread.php in Oxygen (O2PHP Bulletin Board) 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter, a different vector than CVE-2006-1572.
Exploits (1)
This exploit is a PHP script that performs a blind SQL injection attack against Oxygen <= 1.1.3 (O2PHP Bulletin Board) to extract user password hashes. It brute-forces each character of the password by checking HTTP responses for a specific pattern.