The provided text describes SQL injection vulnerabilities in SPIP versions prior to and including 1.8.2-e and 1.9 alpha 2. It includes example URIs demonstrating the exploitation of these vulnerabilities to extract password hashes from the database.
Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:SPIP <= 1.8.2-e, 1.9 alpha 2
No auth needed
Prerequisites:Access to the target SPIP forum.php3 endpoint