CVE-2007-1725
IceBB 1.0-rc5 - Authenticated SQL Injection via Avatar Upload Filename
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2007-1725. PoCs published by Hessam-x.
AI-analyzed exploit summary This exploit targets IceBB 1.0-rc5 by leveraging an avatar upload vulnerability to achieve remote code execution. It authenticates as a user, uploads a malicious PHP file disguised as an avatar, and then executes arbitrary commands via a web shell.
Description
SQL injection vulnerability in index.php in IceBB 1.0-rc5 allows remote authenticated users to execute arbitrary SQL commands via the filename of an uploaded file to the avatar function, as demonstrated by setting admin privileges.
Exploits (2)
This exploit targets IceBB 1.0-rc5 by leveraging an avatar upload vulnerability to achieve remote code execution. It authenticates as a user, uploads a malicious PHP file disguised as an avatar, and then executes arbitrary commands via a web shell.
This exploit targets IceBB 1.0-rc5 by leveraging an avatar upload vulnerability to inject malicious input, escalating a regular user to admin privileges. It requires authentication and specific server configurations (e.g., magic_quotes_gpc = Off).