Exploitation Summary
EIP tracks 7 public exploits for CVE-2007-6380. PoCs published by Lostmon.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in E-Xoops by injecting a UNION-based query to extract user passwords from the database. The vulnerability arises from insufficient sanitization of the 'lid' parameter in the 'ratefile.php' script.
Description
Multiple SQL injection vulnerabilities in e-Xoops (exoops) 1.08, and 1.05 Rev 1 through 3, allow remote attackers to execute arbitrary SQL commands via the (1) lid parameter to (a) mylinks/ratelink.php, (b) adresses/ratefile.php, (c) mydownloads/ratefile.php, (d) mysections/ratefile.php, and (e) myalbum/ratephoto.php in modules/; the (2) bid parameter to (f) modules/banners/click.php; and the (3) gid parameter to (g) modules/arcade/index.php in a show_stats and play_game action, related issues to CVE-2007-5104 and CVE-2007-6266.
Exploits (7)
This exploit demonstrates a SQL injection vulnerability in E-Xoops by injecting a UNION-based query to extract user passwords from the database. The vulnerability arises from insufficient sanitization of the 'lid' parameter in the 'ratefile.php' script.
This exploit demonstrates a SQL injection vulnerability in E-Xoops by injecting a UNION-based query to extract user passwords from the database. The vulnerability arises from insufficient sanitization of user-supplied input in the 'lid' parameter.
This exploit demonstrates a SQL injection vulnerability in E-Xoops by injecting a UNION-based query to extract user passwords from the database. The PoC provides a direct URL to exploit the vulnerability in the 'ratefile.php' module.
This exploit demonstrates a SQL injection vulnerability in E-Xoops via the 'lid' parameter in 'ratephoto.php'. The PoC extracts user passwords from the database by leveraging a UNION-based SQLi attack.
This exploit demonstrates a SQL injection vulnerability in E-Xoops by injecting a UNION-based query to extract user passwords from the database. The attack leverages unsanitized input in the 'bid' parameter of the click.php script.
This exploit demonstrates SQL injection vulnerabilities in E-Xoops by injecting malicious SQL queries via the 'gid' parameter in two different endpoints. The PoC extracts user password hashes from the database.
This exploit demonstrates a SQL injection vulnerability in E-Xoops by injecting a UNION-based query to extract user passwords from the database. The PoC provides a direct URL to exploit the vulnerability in the 'ratefile.php' module.