Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-3052. PoCs published by Kacper.
AI-analyzed exploit summary This exploit targets a SQL injection vulnerability in PNphpBB2 <= 1.2, allowing an attacker to extract admin credentials (username and password hash) from the database. It constructs a malicious SQL query via the 'c' parameter in the URL and retrieves the data by parsing the HTTP response.
Description
SQL injection vulnerability in index.php in the PNphpBB2 1.2i and earlier module for PostNuke allows remote attackers to execute arbitrary SQL commands via the c parameter.
Exploits (1)
This exploit targets a SQL injection vulnerability in PNphpBB2 <= 1.2, allowing an attacker to extract admin credentials (username and password hash) from the database. It constructs a malicious SQL query via the 'c' parameter in the URL and retrieves the data by parsing the HTTP response.