Skip to content

CVE-2007-1960 SQL injection vulnerability in visit.php in the Rha7 Downloads (rha7downloads) 1.0 module for XOOPS, and possibly other versions up to 1.10, allows remote attackers to execute arbitrary SQL commands v...

HighCVSS 7.5 EPSS 1.0% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

SQL injection vulnerability in visit.php in the Rha7 Downloads (rha7downloads) 1.0 module for XOOPS, and possibly other versions up to 1.10, allows remote attackers to execute arbitrary SQL commands via the lid parameter.

Affected products

ProductAffected versionsFixed in
xoops rha7 downloads module = 1.0 No fix listed
xoops rha7 downloads module = 1.10 No fix listed

References

  • 34460 vdb-entry
  • 24790 third-party-advisory vendor-advisory
  • 23320 exploit vdb-entry
  • 3666 exploit