Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-1220. PoCs published by meloulisi.
AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in the 4nChat module for PHP-Nuke. It leverages unsanitized user input in the 'roomid' parameter to extract sensitive data (e.g., admin credentials) via UNION-based SQLi.
Description
SQL injection vulnerability in the 4nChat 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the roomid parameter in an index action to modules.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploits (1)
This exploit demonstrates an SQL injection vulnerability in the 4nChat module for PHP-Nuke. It leverages unsanitized user input in the 'roomid' parameter to extract sensitive data (e.g., admin credentials) via UNION-based SQLi.