Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-0937. PoCs published by S@BUN.
AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in Tiny Event 1.01 by injecting a UNION-based query to extract admin credentials from the 'xoops_users' table. The payload bypasses authentication by manipulating the 'id' parameter in the URL.
Description
SQL injection vulnerability in index.php in the Tiny Event (tinyevent) 1.01 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter in a print action, a different vector than CVE-2007-1811.
Exploits (1)
This exploit demonstrates an SQL injection vulnerability in Tiny Event 1.01 by injecting a UNION-based query to extract admin credentials from the 'xoops_users' table. The payload bypasses authentication by manipulating the 'id' parameter in the URL.