CVE-2007-6128

WorkingOnWeb 2.0.1400 - SQL Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-6128. PoCs published by ka0x.

AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in WorkingOnWeb 2.0.1400, allowing an attacker to extract sensitive information such as MySQL user credentials, database names, and version details via crafted HTTP GET requests.

Description

SQL injection vulnerability in events.php in WorkingOnWeb 2.0.1400 allows remote attackers to execute arbitrary SQL commands via the idevent parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by ka0x · textwebappsphp
https://www.exploit-db.com/exploits/4653

This exploit demonstrates a SQL injection vulnerability in WorkingOnWeb 2.0.1400, allowing an attacker to extract sensitive information such as MySQL user credentials, database names, and version details via crafted HTTP GET requests.

Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: WorkingOnWeb 2.0.1400
No auth needed
Prerequisites: Access to the vulnerable web application endpoint
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3998
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/38612
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/26563
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/4653

Scores

EPSS 0.0101
EPSS Percentile 58.4%

Details

CWE
CWE-89
Status published
Products (1)
flor_de_utopia/workingonweb 2.0.1400
Published Nov 26, 2007
Tracked Since Feb 18, 2026