7.5
CVSSv2

CVE-2007-1815

Published: 02/04/2007 Updated: 11/10/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in viewcat.php in the Library module for Xoops allows remote malicious users to execute arbitrary SQL commands via the cid parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

xoops library module

Exploits

#!/usr/bin/perl #[Script Name: XOOPS Module Library (viewcatphp) BLIND SQL Injection Exploit #[Coded by : ajann #[Author : ajann #[Dork : "inurl:/modules/library/" #[Contact : :( #[SPage : wwwxoopsorg/ #[$$ : ?? #[ : Tested on xoopsorg and xoopsprgovbr #[ : ajann,Turkey use IO::Socket ...