Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-1859. PoCs published by Stefan Esser.
AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in DeluxeBB 1.3 and earlier by manipulating the 'memberid' cookie parameter to extract user credentials from the database. The payload uses a UNION-based SQLi technique to concatenate and retrieve username and password hashes.
Description
SQL injection vulnerability in newpost.php in DeluxeBB 1.3 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the membercookie cookie when adding a new thread.
Exploits (1)
This exploit demonstrates an SQL injection vulnerability in DeluxeBB 1.3 and earlier by manipulating the 'memberid' cookie parameter to extract user credentials from the database. The payload uses a UNION-based SQLi technique to concatenate and retrieve username and password hashes.