Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-1680. PoCs published by Inphex.
AI-analyzed exploit summary This Perl script exploits a SQL injection vulnerability in PHP-Nuke Platinum's dynamic_titles.php file, allowing an attacker to extract data from the nuke_users table when magic_quotes_gpc is disabled. The exploit constructs a malicious URL to perform a UNION-based SQL injection attack.
Description
PHP-Nuke Platinum 7.6.b.5 allows remote attackers to obtain configuration information via a direct request to maintenance/index.php, which reveals settings such as magic_quotes_gpc.
Exploits (1)
This Perl script exploits a SQL injection vulnerability in PHP-Nuke Platinum's dynamic_titles.php file, allowing an attacker to extract data from the nuke_users table when magic_quotes_gpc is disabled. The exploit constructs a malicious URL to perform a UNION-based SQL injection attack.