CVE-2007-1847

Xoops Repository Module - SQL Injection via viewcat.php cid Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-1847. PoCs published by ajann.

AI-analyzed exploit summary This Perl script exploits a blind SQL injection vulnerability in XOOPS Module Repository's viewcat.php to extract admin credentials (username and password) from the xoops_users table. It constructs a malicious SQL query via URL manipulation and parses the response for sensitive data.

Description

SQL injection vulnerability in viewcat.php in the Repository module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by ajann · perlwebappsphp

https://www.exploit-db.com/exploits/3612

View Code ZIP pw:eip

This Perl script exploits a blind SQL injection vulnerability in XOOPS Module Repository's viewcat.php to extract admin credentials (username and password) from the xoops_users table. It constructs a malicious SQL query via URL manipulation and parses the response for sensitive data.

Classification

Working Poc 90%

Attack Type

Sqli

Complexity

Moderate

Reliability

Reliable

Target: XOOPS Module Repository (version unspecified)

No auth needed

Prerequisites: Target must have the vulnerable XOOPS Module Repository installed · Target must be accessible via HTTP · Attacker must know the path to the vulnerable module

MITRE ATT&CK

T1189 - Drive-by Compromise T1505 - Server Software Component

devstral-2 · analyzed Feb 16, 2026 Full analysis →