CVE-2007-5688
Multi-Forums Module 1.3.3 for Invision Power Board and phpBB - SQL Injection via go or cat Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-5688. PoCs published by KiNgOfThEwOrLd.
AI-analyzed exploit summary This exploit demonstrates SQL injection vulnerabilities in Multi-Forums by manipulating the 'go' and 'cat' parameters in directory.php to extract user credentials (name and password) from the database. The PoC uses UNION-based SQLi to concatenate and retrieve sensitive data.
Description
Multiple SQL injection vulnerabilities in directory.php in the Multi-Forums (aka Multi Host Forum Pro) module 1.3.3, for phpBB and Invision Power Board (IPB or IP.Board), allow remote attackers to execute arbitrary SQL commands via the (1) go and (2) cat parameters.
Exploits (1)
This exploit demonstrates SQL injection vulnerabilities in Multi-Forums by manipulating the 'go' and 'cat' parameters in directory.php to extract user credentials (name and password) from the database. The PoC uses UNION-based SQLi to concatenate and retrieve sensitive data.