CVE-2007-1960

SQL injection vulnerability in visit.php in the Rha7 Downloads (rha7downloads) 1.0 module for XOOPS, and possibly other versions up to 1.10, allows remote attackers to execute arbitrary SQL commands via the lid parameter.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.99% chance of exploitation in the next 30 days, 60th percentile

Published

2007-04-11

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/3666

References

• CVE Record
• NVD entry

Related

• CVE-2007-1956
• CVE-2007-1961
• CVE-2007-1948
• CVE-2007-1962
• CVE-2007-1947
• CVE-2007-1963