7.5
CVSSv2

CVE-2007-1813

Published: 02/04/2007 Updated: 11/10/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in display.php in the eCal 2.24 and previous versions module for Xoops allows remote malicious users to execute arbitrary SQL commands via the katid parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

inconnueteam ecal 2.24

Exploits

#!/usr/bin/perl #[Script Name: XOOPS Module eCal 224 <= (displayphp) Remote BLIND SQL Injection Exploit #[Coded by : ajann #[Author : ajann #[Contact : :( #[SPage : wwwinconnueteamnet/ #[$$ : ?? #[ : ajann,Turkey use IO::Socket; if(@ARGV < 1){ print " [============================================= ...