Exploitation Summary
EIP tracks 2 public exploits for CVE-2008-7038. PoCs published by S@BUN, Aria-Security Team.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in XOOPS Module My_eGallery 3.04. It leverages a union-based SQLi to extract user credentials (username and password) from the `xoops_users` table.
Description
SQL injection vulnerability in the My_eGallery module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the gid parameter in a showgall action to modules.php. NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect.
Exploits (2)
This exploit demonstrates a SQL injection vulnerability in XOOPS Module My_eGallery 3.04. It leverages a union-based SQLi to extract user credentials (username and password) from the `xoops_users` table.
This exploit demonstrates a SQL injection vulnerability in PHP-Nuke's My_eGallery module via the 'gid' parameter. It extracts admin credentials from the 'nuke_authors' table by manipulating the SQL query through URL parameters.