This exploit demonstrates an SQL injection vulnerability in the XOOPS 'seminars' module. It leverages unsanitized user input in the 'id' parameter to extract admin credentials from the 'xoops_users' table.
Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:XOOPS 'seminars' module
No auth needed
Prerequisites:Access to the vulnerable XOOPS 'seminars' module endpoint