Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-2023. PoCs published by BugReport.IR.
AI-analyzed exploit summary This exploit demonstrates multiple vulnerabilities in MegaBBS Forum 2.2, including SQL injection in 'attach-file.asp' and 'controlpanel.asp', and XSS in 'impersonate.asp' and 'send-private-message.asp'. The PoC provides forms to trigger these vulnerabilities.
Description
Multiple SQL injection vulnerabilities in PD9 Software MegaBBS 2.2 allow remote attackers to execute arbitrary SQL commands via the (1) invisible and (2) timeoffset parameters to profile/controlpanel.asp and the (3) attachmentid parameter to forums/attach-file.asp.
Exploits (1)
This exploit demonstrates multiple vulnerabilities in MegaBBS Forum 2.2, including SQL injection in 'attach-file.asp' and 'controlpanel.asp', and XSS in 'impersonate.asp' and 'send-private-message.asp'. The PoC provides forms to trigger these vulnerabilities.