CVE-2008-1785

Prozilla Top 100 1.2 - Authenticated Arbitrary Account Deletion via Modified s Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-1785. PoCs published by t0pP8uZz.

AI-analyzed exploit summary This is a writeup describing an arbitrary delete vulnerability in Prozilla Top 100 1.2, where an attacker can delete user stats by manipulating the 's' parameter in the 'delete.php' URL. The vulnerability requires authentication and can be exploited to manipulate site rankings.

Description

delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary users via a modified s parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by t0pP8uZz · textwebappsphp
https://www.exploit-db.com/exploits/5384

This is a writeup describing an arbitrary delete vulnerability in Prozilla Top 100 1.2, where an attacker can delete user stats by manipulating the 's' parameter in the 'delete.php' URL. The vulnerability requires authentication and can be exploited to manipulate site rankings.

Classification
Writeup 90%
Attack Type
Other
Complexity
Trivial
Reliability
Reliable
Target: Prozilla Top 100 1.2
Auth required
Prerequisites: Valid user account · Target site ID
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/1119/references
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/5384
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/41674

Scores

EPSS 0.0197
EPSS Percentile 77.8%

Details

CWE
CWE-20
Status published
Products (1)
prozilla/top_100 1.2
Published Apr 15, 2008
Tracked Since Feb 18, 2026