CVE-2008-6970 PoC — Ubbcentral UBB.threads 'Forum[]'数组SQL注入漏洞

Source

https://github.com/KyomaHooin/CVE-2008-6970

Associated Vulnerability

Title:Ubbcentral UBB.threads 'Forum[]'数组SQL注入漏洞 (CVE-2008-6970)
Description:SQL injection vulnerability in dosearch.inc.php in UBB.threads 7.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the Forum[] array parameter.

Description

Blind SQL injection brute force.

Readme


DESCRIPTION

Exploits PHP parameter input validation flaw and blindly brute force stored MD5 SQL hash for given user ID. 

FILE

<pre>
CVE-2008-6970.sh - Shell code program.
</pre>

SOURCE

https://github.com/KyomaHooin/CVE-2008-6970

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!