cve/2007/CVE-2007-1725.md

CVE-2007-1725

Description

SQL injection vulnerability in index.php in IceBB 1.0-rc5 allows remote authenticated users to execute arbitrary SQL commands via the filename of an uploaded file to the avatar function, as demonstrated by setting admin privileges.

POC

Reference

• https://www.exploit-db.com/exploits/3580
• https://www.exploit-db.com/exploits/3581

Github

No PoCs found on GitHub currently.