CVEvulnerability
CVE-2007-5688
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-10-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in directory.php in the Multi-Forums (aka Multi Host Forum Pro) module 1.3.3, for phpBB and Invision Power Board (IPB or IP.Board), allow remote attackers to execute arbitrary SQL commands via the (1) go and (2) cat parameters.
Affected configurations
• invision power services invision power board
• phpbb phpbb
• sebflipper multi-forums module 1.3.3
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/27406 Vendor Advisory
- http://www.inj3ct-it.org/exploit/Multi_Host.txt Exploit
- http://www.securityfocus.com/archive/1/482838/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26213 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37461 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/27406 Vendor Advisory
- http://www.inj3ct-it.org/exploit/Multi_Host.txt Exploit
- http://www.securityfocus.com/archive/1/482838/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26213 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37461 exchange.xforce.ibmcloud.com