CVE-2007-1808 SQL injection vulnerability in show.php in the Camportail 1.1 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the camid parameter in a showcam action.
HighCVSS 7.5
EPSS 1.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in show.php in the Camportail 1.1 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the camid parameter in a showcam action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| camportail | <= 1.1 | No fix listed |
References
- 34456 vdb-entry
- 24748 third-party-advisory
- 23245 vdb-entry
- ADV-2007-1201 vdb-entry
- xoops-camportail-show-sql-injection(33373) vdb-entry
- 3629 exploit