CVE-2007-1061
PHP-Nuke < 8.0_final - SQL Injection via HTTP Referer Header
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2007-1061. PoCs published by krasza.
AI-analyzed exploit summary This exploit leverages a SQL injection vulnerability in PHP-Nuke <=8.0 Final by manipulating the HTTP Referer header to extract admin credentials (username and password hash) from the database. The exploit sends crafted Referer headers to trigger the vulnerability and retrieves the data via the 'HTTP Referers' block on the target page.
Description
SQL injection vulnerability in index.php in Francisco Burzi PHP-Nuke 8.0 Final and earlier, when the "HTTP Referers" block is enabled, allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header (HTTP_REFERER variable).
Exploits (3)
This exploit leverages a SQL injection vulnerability in PHP-Nuke <=8.0 Final by manipulating the HTTP Referer header to extract admin credentials (username and password hash) from the database. The exploit sends crafted Referer headers to trigger the vulnerability and retrieves the data via the 'HTTP Referers' block on the target page.
This exploit leverages a SQL injection vulnerability in PHP-Nuke <=8.0 Final to insert a new superadmin user into the database. It bypasses authentication by injecting malicious SQL into the referer header.
This exploit demonstrates a blind SQL injection attack against PHP-Nuke <= 8.0 Final, using brute force to extract admin credentials via time-based queries. It leverages the `benchmark` function to infer data by measuring response times.