CVE-2008-3416

IceBB - SQL Injection via Username Parameter in Members Module

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-3416. PoCs published by girex.

AI-analyzed exploit summary This exploit demonstrates a blind SQL injection vulnerability in IceBB <= 1.0-RC9.2, allowing session hijacking by manipulating the query structure via backslashes. The PoC extracts user credentials (username, password hash, and login key) and attempts to authenticate using stolen session cookies.

Description

SQL injection vulnerability in modules/members.php in IceBB before 1.0-rc9.3 allows remote attackers to execute arbitrary SQL commands via the username parameter in a members action to index.php, related to an incorrect protection mechanism in the clean_string function in includes/functions.php.

Exploits (1)

exploitdb WORKING POC VERIFIED

by girex · textwebappsphp

https://www.exploit-db.com/exploits/6137

View Code ZIP pw:eip

This exploit demonstrates a blind SQL injection vulnerability in IceBB <= 1.0-RC9.2, allowing session hijacking by manipulating the query structure via backslashes. The PoC extracts user credentials (username, password hash, and login key) and attempts to authenticate using stolen session cookies.

Classification

Working Poc 95%

Attack Type

Sqli

Complexity

Moderate

Reliability

Reliable

Target: IceBB <= 1.0-RC9.2

No auth needed

Prerequisites: Target must have IceBB <= 1.0-RC9.2 installed · Target must have at least one user with a valid session

MITRE ATT&CK