CVEvulnerability
CVE-2007-6544
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-12-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in RunCMS before 1.6.1 allow remote attackers to execute arbitrary SQL commands via the lid parameter to (1) brokenfile.php, (2) visit.php, or (3) ratefile.php in modules/mydownloads/; or (4) ratelink.php, (5) modlink.php, or (6) brokenlink.php in modules/mylinks/.
Affected configurations
• runcms runcms 1.6
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/41235 osvdb.org
- http://osvdb.org/41236 osvdb.org
- http://osvdb.org/41237 osvdb.org
- http://osvdb.org/41238 osvdb.org
- http://osvdb.org/41239 osvdb.org
- http://osvdb.org/41240 osvdb.org
- http://securityreason.com/securityalert/3493 securityreason.com
- http://www.runcms.org/modules/mydownloads/singlefile.php?lid=131 www.runcms.org
- http://www.securityfocus.com/archive/1/485512/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27019 Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39289 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4787 www.exploit-db.com
- https://www.exploit-db.com/exploits/4790 www.exploit-db.com
- http://osvdb.org/41235 osvdb.org
- http://osvdb.org/41236 osvdb.org
- http://osvdb.org/41237 osvdb.org
- http://osvdb.org/41238 osvdb.org
- http://osvdb.org/41239 osvdb.org
- http://osvdb.org/41240 osvdb.org
- http://securityreason.com/securityalert/3493 securityreason.com
- http://www.runcms.org/modules/mydownloads/singlefile.php?lid=131 www.runcms.org
- http://www.securityfocus.com/archive/1/485512/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27019 Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39289 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4787 www.exploit-db.com
- https://www.exploit-db.com/exploits/4790 www.exploit-db.com