CVE-2007-3311 SQL injection vulnerability in print.php in the Articles 1.02 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter.
HighCVSS 7.5
EPSS 1.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in print.php in the Articles 1.02 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xoops articles module | <= 1.02 | No fix listed |
References
- 2817 third-party-advisory
- 20070327 Xoops All Version -Articles- Print.PHP (ID) Blind SQL Injection Exploit And PoC mailing-list
- 3588 exploit