Published: 12/04/2007 Updated: 16/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 765

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

SQL injection vulnerability in the getArticle function in class/wfsarticle.php in WF-Section (aka WF-Sections) 1.0.1, as used in Xoops modules such as (1) Zmagazine 1.0, (2) Happy Linux XFsection 1.07 and previous versions, and possibly other modules, allows remote malicious users to execute arbitrary SQL commands via the articleid parameter to print.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wf-sections wf-sections 1.0.1
xoops zmagazine module 1.0
xoops happy linux xfsection module

<html> <head> <title>XOOPS Module XFsection <= 107 (articleid) BLIND SQL Injection Exploit</title> <script type="text/javascript"> //'=============================================================================================== //'[Script Name: XOOPS Module XFsection <= 107 (articleid) BLIND SQL Injection E ...

#!/usr/bin/perl #[Script Name: XOOPS Module Zmagazine 10 (printphp) Remote BLIND SQL Injection Exploit #[Coded by : ajann #[Author : ajann #[Contact : :( #[Dork : "inurl:/modules/zmagazine/" Result:20800 #[Example S : wwwgooglecomtr/search?q=inurl:/modules/zmagazine/&hl=tr&start=0&sa=N #[SPage : ...

#!/usr/bin/perl #[Script Name: XOOPS Module WF-Section <= 101 (articleid) Remote BLIND SQL Injection Exploit #[Coded by : ajann #[Author : ajann #[Contact : :( #[Dork : "inurl:/modules/wfsection/" Result:808000 #[Example S : wwwgooglecomtr/search?q=inurl:/modules/wfsection/&hl=tr&start=90&sa=N #[SPage ...

NVD-CWE-Other http://www.xoops.org/modules/newbb/viewtopic.php?viewmode=flat&order=ASC&topic_id=58229&forum=4&move=next&topic_time=1176217411 http://www.xoops.org/modules/news/article.php?storyid=3717 http://addons.zarilia.com/index.php?page_type=static&id=43 http://www.attrition.org/pipermail/vim/2007-April/001507.html http://www.securityfocus.com/bid/23258 http://www.securityfocus.com/bid/23259 http://www.securityfocus.com/bid/23261 http://osvdb.org/41387 http://osvdb.org/52230 http://www.vupen.com/english/advisories/2007/1208 http://www.vupen.com/english/advisories/2007/1207 http://www.vupen.com/english/advisories/2007/1209 https://exchange.xforce.ibmcloud.com/vulnerabilities/33380 https://exchange.xforce.ibmcloud.com/vulnerabilities/33379 https://exchange.xforce.ibmcloud.com/vulnerabilities/33378 https://www.exploit-db.com/exploits/3646 https://www.exploit-db.com/exploits/3645 https://www.exploit-db.com/exploits/3644 http://www.securityfocus.com/archive/1/488317/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/3645/

CVE-2007-1974

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect