Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-1305. PoCs published by t0pP8uZz.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in the phpBB FileBase MOD, allowing an attacker to extract user credentials (username and password) via a UNION-based SQLi attack. The payload is injected through the 'id' parameter in filebase.php.
Description
SQL injection vulnerability in filebase.php in the Filebase mod for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in the phpBB FileBase MOD, allowing an attacker to extract user credentials (username and password) via a UNION-based SQLi attack. The payload is injected through the 'id' parameter in filebase.php.