EUVD-2007-2368

Malware in sbrugna...

XOOPS Module WF Links Remote SQL Injection (CVE-2007-2373)

An SQL injection vulnerability has been reported in Wf-links. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2007-2373

SQL injection vulnerability in viewcat.php in the WF-Links wflinks 1.03 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Sql injection

SQL injection vulnerability in viewcat.php in the WF-Links wflinks 1.03 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-2373

SQL injection vulnerability in viewcat.php in the WF-Links wflinks 1.03 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-2373

The provided connected documents confirm a concrete vulnerability: WF-Links (wflinks) module for XOOPS, version 1.03 and earlier, contains an SQL injection in viewcat.php. The flaw allows remote attackers to manipulate the cid parameter to execute arbitrary SQL commands on the backend. The affect...

xoopswflinks-sql.txt

!/usr/bin/perl Script Name: XOOPS Module WF-Links : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User ID uid: "; $id = ; chop $id; $target =...

XOOPS Module WF-Links 1.03 - cid SQL Injection

XOOPS Module WF-Links 1.03 - cid SQL Injection !/usr/bin/perl Script Name: XOOPS Module WF-Links : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User ID uid: "; $id = ; chop $id; $targe...

XOOPS Module WF-Links <= 1.03 (cid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ XOOPS Module WF-Links : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit;...