CVE-2007-3311

This Perl script exploits a SQL injection vulnerability in Xoops module Articles <= 1.02 via the 'cat_id' parameter. It extracts admin credentials (username and password) from the 'xoops_users' table by injecting a UNION-based SQL query.

This Perl script exploits a blind SQL injection vulnerability in Xoops' articles module by injecting a UNION-based query to extract user passwords from the database. It sends a crafted HTTP request to the vulnerable endpoint and parses the response to retrieve the password hash.