Exploitation Summary
EIP tracks 3 public exploits for CVE-2005-0725.
AI-analyzed exploit summary This Perl script exploits a blind SQL injection vulnerability in XOOPS Module Zmagazine 1.0 via the 'print.php' file. It extracts admin credentials (username and password) from the 'xoops_users' table by injecting a crafted SQL query.
Description
SQL injection vulnerability in the getAllbyArticle function in wfsfiles.php for WF-Sections (wfsections) 1.07 allows remote attackers to execute arbitrary SQL commands via the articleid parameter to article.php.
Exploits (3)
This Perl script exploits a blind SQL injection vulnerability in XOOPS Module Zmagazine 1.0 via the 'print.php' file. It extracts admin credentials (username and password) from the 'xoops_users' table by injecting a crafted SQL query.
This is a functional blind SQL injection exploit targeting XOOPS Module XFsection <= 1.07. It uses JavaScript to automate the extraction of the admin password by testing ASCII values of characters in the password.
This Perl script exploits a blind SQL injection vulnerability in XOOPS Module WF-Section <= 1.01 via the 'articleid' parameter. It extracts admin credentials (username and password) from the 'xoops_users' table by crafting a malicious SQL query.