Exploitation Summary
EIP tracks 2 public exploits for CVE-2008-2094. PoCs published by []0iZy5, Cr@zy_King.
AI-analyzed exploit summary This is a writeup describing a SQL injection vulnerability in XOOPS 2.0.14's article.php. It provides an example payload and explains the vulnerability but does not include functional exploit code.
Description
SQL injection vulnerability in article.php in the Article module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter.
Exploits (2)
This is a writeup describing a SQL injection vulnerability in XOOPS 2.0.14's article.php. It provides an example payload and explains the vulnerability but does not include functional exploit code.
This exploit targets an SQL injection vulnerability in XOOPS Article module by injecting a UNION-based query to extract user passwords from the database. It sends a crafted HTTP GET request to retrieve the password hash of a specified user ID.