CVE-2008-0154

EvilBoard 0.1a - SQL Injection via c Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-0154. PoCs published by seaofglass.

AI-analyzed exploit summary The exploit demonstrates two vulnerabilities in EvilBoard 0.1a: a reflected XSS via the 'c' parameter and a remote SQL injection that leaks user credentials. Both PoCs are functional and directly exploitable via crafted URLs.

Description

SQL injection vulnerability in index.php in EvilBoard 0.1a (Alpha) allows remote attackers to execute arbitrary SQL commands the c parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by seaofglass · textwebappsphp
https://www.exploit-db.com/exploits/4865

The exploit demonstrates two vulnerabilities in EvilBoard 0.1a: a reflected XSS via the 'c' parameter and a remote SQL injection that leaks user credentials. Both PoCs are functional and directly exploitable via crafted URLs.

Classification
Working Poc 100%
Attack Type
Xss | Sqli
Complexity
Trivial
Reliability
Reliable
Target: EvilBoard 0.1a
No auth needed
Prerequisites: Target running EvilBoard 0.1a · Network access to the target
mistral-large-3 · analyzed Feb 18, 2026 Full analysis →

References (3)

Core 3
Core References
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/4865
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/39529
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/27190

Scores

EPSS 0.0100
EPSS Percentile 58.5%

Details

CWE
CWE-89
Status published
Products (1)
evilboard/evilboard 0.1a
Published Jan 09, 2008
Tracked Since Feb 18, 2026