CVEvulnerability
CVE-2007-1920
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-04-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in index.php in the aktualnosci module in SmodBIP 1.06 and earlier allows remote attackers to execute arbitrary SQL commands via the zoom parameter, possibly related to home.php.
Affected configurations
• smodbip smodbip (<= 1.06)
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/34745 osvdb.org
- http://secunia.com/advisories/24802 Vendor Advisory
- http://www.securityfocus.com/bid/23356 Exploit, Vendor Advisory
- http://www.vupen.com/english/advisories/2007/1298 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33476 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/3678 www.exploit-db.com
- http://osvdb.org/34745 osvdb.org
- http://secunia.com/advisories/24802 Vendor Advisory
- http://www.securityfocus.com/bid/23356 Exploit, Vendor Advisory
- http://www.vupen.com/english/advisories/2007/1298 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33476 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/3678 www.exploit-db.com