Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-4116. PoCs published by Cr@zy_King.
AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in Metyus Forum Portal 1.0 by injecting a UNION-based query to extract user credentials (username and password) from the database. The attack leverages unsanitized input in the 'forumid' parameter.
Description
SQL injection vulnerability in philboard_forum.asp in Metyus Forum Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: this might be related to CVE-2007-0920 or CVE-2007-3884.
Exploits (1)
This exploit demonstrates an SQL injection vulnerability in Metyus Forum Portal 1.0 by injecting a UNION-based query to extract user credentials (username and password) from the database. The attack leverages unsanitized input in the 'forumid' parameter.