CVE-2007-6380

This exploit demonstrates a SQL injection vulnerability in E-Xoops by injecting a UNION-based query to extract user passwords from the database. The vulnerability arises from insufficient sanitization of the 'lid' parameter in the 'ratefile.php' script.

This exploit demonstrates a SQL injection vulnerability in E-Xoops by injecting a UNION-based query to extract user passwords from the database. The vulnerability arises from insufficient sanitization of user-supplied input in the 'lid' parameter.

This exploit demonstrates a SQL injection vulnerability in E-Xoops by injecting a UNION-based query to extract user passwords from the database. The PoC provides a direct URL to exploit the vulnerability in the 'ratefile.php' module.

This exploit demonstrates a SQL injection vulnerability in E-Xoops via the 'lid' parameter in 'ratephoto.php'. The PoC extracts user passwords from the database by leveraging a UNION-based SQLi attack.

This exploit demonstrates a SQL injection vulnerability in E-Xoops by injecting a UNION-based query to extract user passwords from the database. The attack leverages unsanitized input in the 'bid' parameter of the click.php script.

This exploit demonstrates SQL injection vulnerabilities in E-Xoops by injecting malicious SQL queries via the 'gid' parameter in two different endpoints. The PoC extracts user password hashes from the database.

This exploit demonstrates a SQL injection vulnerability in E-Xoops by injecting a UNION-based query to extract user passwords from the database. The PoC provides a direct URL to exploit the vulnerability in the 'ratefile.php' module.