CVE-2007-1920 SQL injection vulnerability in index.php in the aktualnosci module in SmodBIP 1.06 and earlier allows remote attackers to execute arbitrary SQL commands via the zoom parameter, possibly related to hom...
HighCVSS 7.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in index.php in the aktualnosci module in SmodBIP 1.06 and earlier allows remote attackers to execute arbitrary SQL commands via the zoom parameter, possibly related to home.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| smodbip | <= 1.06 | No fix listed |
References
- 34745 vdb-entry
- 24802 third-party-advisory vendor-advisory
- 23356 exploit vdb-entry vendor-advisory
- ADV-2007-1298 vdb-entry vendor-advisory
- smodbip-index-sql-injection(33476) vdb-entry
- 3678 exploit