CVE-2008-4092

myphpnuke < 1.8.8_8 - SQL Injection via printfeature.php artid Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-4092. PoCs published by MustLive.

AI-analyzed exploit summary This exploit demonstrates a SQL Injection vulnerability in myPHPNuke's printfeature.php, allowing an attacker to retrieve administrator credentials (login and password hash) via a crafted SQL query. The vulnerability affects versions prior to 1.8.8_8rc2.

Description

SQL injection vulnerability in printfeature.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote attackers to execute arbitrary SQL commands via the artid parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by MustLive · textwebappsphp

https://www.exploit-db.com/exploits/6347

View Code ZIP pw:eip

This exploit demonstrates a SQL Injection vulnerability in myPHPNuke's printfeature.php, allowing an attacker to retrieve administrator credentials (login and password hash) via a crafted SQL query. The vulnerability affects versions prior to 1.8.8_8rc2.

Classification

Working Poc 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: myPHPNuke < 1.8.8_8rc2

No auth needed

Prerequisites: Access to the target myPHPNuke instance

MITRE ATT&CK