CVE-2007-1902
SonicBB 1.0 - SQL Injection via Part or By Parameter in Search or ID Parameter in Viewforum
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-1902. PoCs published by Jesper Jurcenoks.
AI-analyzed exploit summary The exploit demonstrates SQL injection vulnerabilities in SonicBB 1.0 by injecting malicious SQL queries into the 'query' and 'id' parameters. It retrieves user credentials (id, password, username) from the 'users' table via UNION-based SQLi.
Description
Multiple SQL injection vulnerabilities in SonicBB 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) part and (2) by parameters to (a) search.php, or the (2) id parameter to (b) viewforum.php.
Exploits (1)
The exploit demonstrates SQL injection vulnerabilities in SonicBB 1.0 by injecting malicious SQL queries into the 'query' and 'id' parameters. It retrieves user credentials (id, password, username) from the 'users' table via UNION-based SQLi.