high7.5Public exploit code
CVE-2005-0725
SQL injection vulnerability in the getAllbyArticle function in wfsfiles.php for WF-Sections (wfsections) 1.07 allows remote attackers to execute arbitrary SQL …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- XOOPS Module Zmagazine 1.0 - 'print.php' SQL Injection2007-04-02 · webapps · php · Verified
- XOOPS Module XFsection 1.07 - 'articleId' Blind SQL Injection2007-04-02 · webapps · php · Verified
- XOOPS Module WF-Section 1.01 - 'articleId' SQL Injection2007-04-02 · webapps · php · Verified
Impact
SQL injection vulnerability in the getAllbyArticle function in wfsfiles.php for WF-Sections (wfsections) 1.07 allows remote attackers to execute arbitrary SQL commands via the articleid parameter to article.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wf-Sections | Wf-Sections | Version 1.07 |