CVE-2006-6756
Ixprim CMS 1.2 - Unauthenticated Brute Force Attack via Guessable IXP_CODE
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-6756. PoCs published by DarkFig.
AI-analyzed exploit summary This Perl script exploits a blind SQL injection vulnerability in Ixprim 1.2 CMS by targeting the 'story_id' parameter in 'ixm_ixpnews.php'. It extracts administrator credentials, password hashes, and the confidential IXP code via time-based blind SQLi techniques.
Description
The code function in install.fct.php in Ixprim 1.2 produces a guessable value of the confidential IXP_CODE in mainfile.php, which might allow remote attackers to gain access to the administration panel via a brute force attack.
Exploits (1)
This Perl script exploits a blind SQL injection vulnerability in Ixprim 1.2 CMS by targeting the 'story_id' parameter in 'ixm_ixpnews.php'. It extracts administrator credentials, password hashes, and the confidential IXP code via time-based blind SQLi techniques.