CVE-2007-1931 SQL injection vulnerability in index.php in the slownik module in SmodCMS 2.10 and earlier allows remote attackers to execute arbitrary SQL commands via the ssid parameter.
HighCVSS 7.5
EPSS 1.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in index.php in the slownik module in SmodCMS 2.10 and earlier allows remote attackers to execute arbitrary SQL commands via the ssid parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| smodcms | <= 2.10 | No fix listed |
References
- 37395 vdb-entry
- ADV-2007-1299 vdb-entry
- smodcms-ssid-sql-injection(33477) vdb-entry
- 3679 exploit