vendor:
XOOPS Module Core
by:
ajann
5.5
CVSS
MEDIUM
Remote Blind SQL Injection
CWE
Product Name: XOOPS Module Core
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested: Unknown
Unknown
XOOPS Module Core (viewcat.php) Remote BLIND SQL Injection Exploit
This exploit allows an attacker to perform a blind SQL injection attack on the XOOPS Module Core's viewcat.php script. By manipulating the 'cid' parameter, the attacker can extract sensitive information from the database, such as usernames and passwords.
Mitigation:
Update to a patched version of the XOOPS Module Core or apply proper input validation to prevent SQL injection attacks.
