CVEvulnerability
CVE-2007-1960
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-04-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in visit.php in the Rha7 Downloads (rha7downloads) 1.0 module for XOOPS, and possibly other versions up to 1.10, allows remote attackers to execute arbitrary SQL commands via the lid parameter.
Affected configurations
• xoops rha7 downloads module 1.0
• xoops rha7 downloads module 1.10
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/34460 osvdb.org
- http://secunia.com/advisories/24790 Vendor Advisory
- http://www.securityfocus.com/bid/23320 Exploit
- https://www.exploit-db.com/exploits/3666 www.exploit-db.com
- http://osvdb.org/34460 osvdb.org
- http://secunia.com/advisories/24790 Vendor Advisory
- http://www.securityfocus.com/bid/23320 Exploit
- https://www.exploit-db.com/exploits/3666 www.exploit-db.com