CVE-2009-3804
RunCMS 2M1 - Authenticated SQL Injection via Forum Post Parameters
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2009-3804. PoCs published by bookoo, Nine:Situations:Group::bookoo.
AI-analyzed exploit summary This exploit targets a SQL injection vulnerability in RunCms v.2M1's forum module, specifically in the `store()` function. It allows an authenticated attacker to inject malicious SQL queries via the `pid` parameter to extract admin credentials.
Description
Multiple SQL injection vulnerabilities in modules/forum/post.php in RunCMS 2M1 allow remote authenticated users to execute arbitrary SQL commands via (1) the pid parameter, which is not properly handled by the store function in modules/forum/class/class.forumposts.php, or (2) the topic_id parameter.
Exploits (2)
This exploit targets a SQL injection vulnerability in RunCms v.2M1's forum module, specifically in the `store()` function. It allows an authenticated attacker to inject malicious SQL queries via the `pid` parameter to extract admin credentials.
This exploit targets an SQL injection vulnerability in RunCMS v2M1, specifically in the '/modules/forum/post.php' file. It allows an attacker to extract admin credentials, hijack sessions, or export a PHP shell under certain conditions.