CVE-2007-1846 SQL injection vulnerability in index.php in the MyAds 2.04jp and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter, different vectors than CVE-20...
HighCVSS 7.5
EPSS 2.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in index.php in the MyAds 2.04jp and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter, different vectors than CVE-2006-3341.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xoops malaika system myads module | <= 2.04 | No fix listed |
References
- 37372 vdb-entry
- 23212 exploit vdb-entry vendor-advisory
- xoops-myads-index-sql-injection(33334) vdb-entry
- 3603 exploit