CVE-2007-6544 Multiple SQL injection vulnerabilities in RunCMS before 1.6.1 allow remote attackers to execute arbitrary SQL commands via the lid parameter to (1) brokenfile.php, (2) visit.php, or (3) ratefile.php i...
HighCVSS 7.5
EPSS 4.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in RunCMS before 1.6.1 allow remote attackers to execute arbitrary SQL commands via the lid parameter to (1) brokenfile.php, (2) visit.php, or (3) ratefile.php in modules/mydownloads/; or (4) ratelink.php, (5) modlink.php, or (6) brokenlink.php in modules/mylinks/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| runcms | = 1.6 | No fix listed |
References
- 41235 vdb-entry
- 41236 vdb-entry
- 41237 vdb-entry
- 41238 vdb-entry
- 41239 vdb-entry
- 41240 vdb-entry
- 3493 third-party-advisory
- www.runcms.org
- 20071225 Multiple vulnerabilities in RUNCMS 1.6 by DSecRG mailing-list
- 27019 exploit patch vdb-entry
- runcms-lid-sql-injection(39289) vdb-entry
- 4787 exploit
- 4790 exploit