CVE-2009-4884
phpCommunity 2 2.1.8 - SQL Injection via forum_id or topic_id Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2009-4884. PoCs published by Salvatore Fresta.
AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in phpCommunity 2.1.8, including SQL injection (with payloads to extract user credentials), directory traversal (to read arbitrary files), and reflected XSS. The provided URLs are functional examples of exploiting these flaws.
Description
Multiple SQL injection vulnerabilities in phpCommunity 2 2.1.8, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via (1) the forum_id parameter in a forum action to index.php, (2) the topic_id parameter in a forum action to index.php, (3) the wert parameter in an id search action to index.php, (4) the wert parameter in a nick search action to index.php, or (5) the wert parameter in a forum search action to index.php, related to class_forum.php and class_search.php.
Exploits (1)
The exploit demonstrates multiple vulnerabilities in phpCommunity 2.1.8, including SQL injection (with payloads to extract user credentials), directory traversal (to read arbitrary files), and reflected XSS. The provided URLs are functional examples of exploiting these flaws.