Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-6100. PoCs published by ~!Dok_tOR!~.
AI-analyzed exploit summary The exploit demonstrates SQL injection vulnerabilities in Discussion Forums 2k 3.3 via three distinct endpoints (RSS1.php, RSS2.php, RSS5.php). Each exploit leverages UNION-based SQLi to extract user credentials (Name, Password, Email) from the DF2k_Members table when magic_quotes_gpc is disabled.
Description
Multiple SQL injection vulnerabilities in Discussion Forums 2k 3.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) CatID parameter to (a) RSS1.php and (b) RSS2.php in misc/; and the (2) SubID parameter to (c) misc/RSS5.php.
Exploits (1)
The exploit demonstrates SQL injection vulnerabilities in Discussion Forums 2k 3.3 via three distinct endpoints (RSS1.php, RSS2.php, RSS5.php). Each exploit leverages UNION-based SQLi to extract user credentials (Name, Password, Email) from the DF2k_Members table when magic_quotes_gpc is disabled.