Description
Variable overwrite vulnerability in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to overwrite arbitrary program variables via multiple vectors that use the extract function, as demonstrated by the table_prefix parameter in (1) index.php, (2) profile.php, and (3) header.php.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- PHP-post Web Forum 0.x.1.0 - 'profile.php' Multiple SQL Injections EDB-28591 · webapps · Sep 16, 2006 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 20061 vdb-entry
- ADV-2006-3688 vdb-entry
- 28966 vdb-entry
- 1607 third-party-advisory
- 28967 vdb-entry
- 22014 third-party-advisory
- 20060916 PHP-Post Multiple Input Validation Vulnerabilities mailing-list
- 28965 vdb-entry