Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-1254. PoCs published by DarkFig.
AI-analyzed exploit summary This exploit targets Connectix Boards <= 0.7, leveraging SQL injection for privilege escalation and arbitrary file upload for remote code execution. It authenticates, injects malicious SQL to escalate privileges, and uploads a fake JPG containing PHP code to achieve RCE.
Description
SQL injection vulnerability in part.userprofile.php in Connectix Boards 0.7 and earlier allows remote authenticated users to execute arbitrary SQL commands and obtain privileges via the p_skin parameter to index.php.
Exploits (1)
This exploit targets Connectix Boards <= 0.7, leveraging SQL injection for privilege escalation and arbitrary file upload for remote code execution. It authenticates, injects malicious SQL to escalate privileges, and uploads a fake JPG containing PHP code to achieve RCE.