CVE-2010-4866

chipmunk_board 1.3 - SQL Injection via forumID Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2010-4866. PoCs published by Shamus.

AI-analyzed exploit summary This is a writeup describing a SQL injection vulnerability in Chipmunk Board 1.3. The vulnerability allows an attacker to inject malicious SQL queries via the 'forumID' parameter in the 'index.php' file, potentially exposing sensitive database information.

Description

SQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute arbitrary SQL commands via the forumID parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Shamus · textwebappsphp
https://www.exploit-db.com/exploits/15175

This is a writeup describing a SQL injection vulnerability in Chipmunk Board 1.3. The vulnerability allows an attacker to inject malicious SQL queries via the 'forumID' parameter in the 'index.php' file, potentially exposing sensitive database information.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: Chipmunk Forums Version 1.3
No auth needed
Prerequisites: Access to the target application's URL
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/43648
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/8423
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/15175
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/62221

Scores

EPSS 0.0104
EPSS Percentile 59.7%

Details

CWE
CWE-89
Status published
Products (1)
chipmunk-scripts/chipmunk_board 1.3
Published Oct 05, 2011
Tracked Since Feb 18, 2026