CVE-2007-5643
Lussumo Vanilla < 1.1.3 - SQL Injection via CategoryID Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-5643. PoCs published by InATeam.
AI-analyzed exploit summary This PHP script exploits a blind SQL injection vulnerability in Vanilla Forum <= 1.1.3 via the /ajax/sortcategories.php endpoint. It uses time-based techniques (BENCHMARK) to extract user password hashes from the database.
Description
Multiple SQL injection vulnerabilities in Lussumo Vanilla 1.1.3 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the CategoryID parameter to ajax/sortcategories.php or (2) an unspecified vector to ajax/sortroles.php.
Exploits (1)
This PHP script exploits a blind SQL injection vulnerability in Vanilla Forum <= 1.1.3 via the /ajax/sortcategories.php endpoint. It uses time-based techniques (BENCHMARK) to extract user password hashes from the database.