Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-1539. PoCs published by Inphex.
AI-analyzed exploit summary This Perl script exploits a SQL injection vulnerability in PHP-Nuke Platinum's dynamic_titles.php file, allowing an attacker to extract data from the nuke_users table when magic_quotes_gpc is disabled. The exploit constructs a malicious URL to perform a UNION-based SQL injection attack.
Description
SQL injection vulnerability in includes/dynamic_titles.php in PHP-Nuke Platinum 7.6.b.5 allows remote attackers to execute arbitrary SQL commands via the p parameter to modules.php for the Forums module.
Exploits (1)
This Perl script exploits a SQL injection vulnerability in PHP-Nuke Platinum's dynamic_titles.php file, allowing an attacker to extract data from the nuke_users table when magic_quotes_gpc is disabled. The exploit constructs a malicious URL to perform a UNION-based SQL injection attack.